Use of Keylogger for changing grades gets Student expelled

Parsh

Level 25
Thread author
Verified
Honorary Member
Top Poster
Malware Hunter
Well-known
Dec 27, 2016
1,480
In another instance of exploiting info-stealing tools for academic benefits,
A University of Kansas student was expelled from the school after allegedly changing his grades from an "F" to an "A" using information he obtained via a keystroke logger.

In the spring semester, the student plugged the USB thumb drive-sized device into the back of a lecture hall computer and was able to steal the credentials to log into the school grading system, 41 Action News reported.
"This goes beyond the naughty little boy who snuck into his professor's office in the middle of the night and pulled the exam paper out," Aerospace engineering professor Ron Barrett-Gonzalez told the news station. "It's a form of betrayal that goes beyond the norm."

Barrett-Gonzalez said it would have been harder to spot the intrusion if the student had made a more incremental change such as from a "C" to a "C+" or a "C" to a "B." Although the incident happened nearly a year ago, professors weren't notified of the incident until a meeting held two weeks ago.

This is an iteration of the various academic manipulations done in the past such as [1], [2], [3], [4] & [5].
From article 5:
Two students and a graduate of Florida International University were allegedly caught hacking into a professor’s computer, obtaining upcoming tests, and selling the answers for $150.
Sun and his accused accomplice, fellow Purdue student Mitsutoshi Shirasaki, gained access to professors’ computers by picking locks on their office doors, then installing keystroke loggers on their keyboards, prosecutors said. Hoping to avoid detection, they waited to hack into the university computer system until 10 minutes before professors' deadline to submit their grades for the semester, according to the Lafayette Journal and Courier. But they aroused suspicion by changing professors’ passwords. Shirasaki failed to mask his computer's IP address, allowing authorities to link the hacking to his apartment, where they found a keystroke logger and a lock-picking set.

Still, student hackers have pushed some schools to improve security. After Sun’s arrest, Purdue University replaced keyboards in open areas with thin, Apple-made keyboards, making it more difficult to install keystroke loggers, Tally said.
Many colleges and universities should do more, including requiring staff to log in at computers that are off-limits to students, and requiring professors to use two-step authentication -- entering a random password sent to their phones -- before logging in to a system with grades and tests, experts said.
 

Lightning_Brian

Level 15
Verified
Top Poster
Content Creator
Sep 1, 2017
743
WOW! Sad world we live in...... Who in their right mind would do this? Winners never cheat and cheaters never win.

I do like the idea of having two-step authentication for all administrative staff, professors, and employees to use at universities and colleges. This would increase security and incidents like this would be much harder to pull off. Having worked in IT at a college for a long time I really like this idea as it helps with lots of different situations.

All I have to say - shame on them! Thou shall not lie!
 

Handsome Recluse

Level 23
Verified
Top Poster
Well-known
Nov 17, 2016
1,242
D

Deleted member 65228

Trying to hack into your tutors computer is like learning to drive and then trying to beat your driving instructor's skill-set on the exam. The likelihood is it will blow up in your face and cause a problem. Besides, why waste all your hard-work to do something like that? I assume they'll be getting criminal charges for what they did now... What a waste of time for both the professor/education system and the student.

https://www.psychologytoday.com/blo...he-marshmallow-test-willpower-and-adhd-part-1
Could be impulsive behavior which is a sign of adhd. But the bigger point is, our choices are much less a choice than people think it is especially if you have a disorder.
You're right and I can verify that ADHD can cause very impulsive behavior considering I have it (the informative articles online about ADHD really are generally true but some are better than others depends how bad it is); I have to take medication pretty much every single day which is stimulant-based to keep me more active (helps make me work more), motivate me more (due to dopamine release I believe), improve organisation and time management skills, help prevent me from being impulsive and many other things.

If the actions did happen to be induced by a condition then hopefully they'll be diagnosed and treated for the future. It can be a REALLY exhaustive process, I remember having to wait for over 6 months for the real appointments.

It is certainly a possibility... good note! I don't think I've ever seen someone mention something like that on a discussion like this. Whoa:)
 

gorblimey

Level 3
Verified
Aug 30, 2017
101
I do like the idea of having two-step authentication ...

+1.

But I remember back in the 70s doing IT and using the Cyber at UWA, we were warned to never leave any important stuff on the UWA DEC 10, as the students there were regularly cracking in. The Cyber was different, no user accounts, most work was batched on punch-cards.

So nothing new in this incident except the level of stupidity, and I'm not even sure of that!
 
  • Like
Reactions: Parsh and given
D

Deleted Member 3a5v73x

I once setup keylogger in my home pc, because sometimes my gf was staying at home and I had a feeling something fishy is going on after browsing history was deleted. I found out she was watching p0rn, but then I made a mistake because I thought she was chatting with someone and I saved also one of her email credentials in notepad and saved on desktop, somehow she managed to open exactly that document and see that I was spying on her, and she was quite upset about it, but then we had a talk and she was just bored and I wasn't giving her enough attention. We both learned our lesson. :(:cautious:
 
Last edited by a moderator:

Entreri

Level 7
Verified
May 25, 2015
342
If the student made an incremental change, go under the radar. Greed. I am surprised the prof did not catch it, very few people get A's.
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top