Amazon is trying to monitor employee 'keyboard and mouse cursor movements'



A confidential document obtained by Motherboard , the technology news department of overseas news media Vice, revealed that Amazon is considering a 'solution to monitor the movement of the keyboard and mouse cursor of customer service employees'. This solution is not meant to find employee sabotage, but to catch malicious hackers, scammers, and more.

Amazon to Monitor Customer Service Workers' Keyboard and Mouse Strokes
https://www.vice.com/en/article/dyvejq/amazon-monitor-employees-keyboard-mouse

Here's Why Amazon Wants To Monitor Employee Keystrokes In Its Latest Surveillance Push | HotHardware
https://hothardware.com/news/amazon-looks-to-monitor-employee-keystrokes

The confidential document obtained by Motherboard included a review report on a solution to detect unauthorized access from keyboard and mouse cursor movements. The solution uses individual profiles generated from employee keyboard and mouse cursor movements to continually verify that an account has been compromised by a third party.

While the pandemic of the new coronavirus continued, Amazon allowed office employees to work from home , but it is said that the number of cases where customer data is stolen has increased. Confidential documents also describe cases of customer data theft, including cases where a customer support employee used an internal search tool when the customer support employee left without locking the PC, or the customer service employee himself keyboarded. There have been reports of cases where customer information was stolen using a device called 'USB Rubber Ducky ' that disguised itself as a PC and sends arbitrary keystrokes to a PC.

According to the document, India (more than 120 cases) ranked first in the number of theft cases by country, the Philippines (a little less than 70 cases) ranked second, and the United States (about 40 cases) ranked third, 3 minutes of all theft cases. One was to use a password sold by a customer service employee and a two-step verification device.

Due to the increase in data theft cases, Amazon is trying to purchase a product called BehavioSec that detects unauthorized access from the movement of the keyboard and mouse cursor of a cyber security company. According to the document, Amazon is considering purchasing a license for about 750,000 people, and the estimated price is 1.36 million dollars (about 150 million yen).



Amazon seems to be considering purchasing a model of 'collecting with privacy in mind' instead of a model of collecting keyboard data anonymously, and the document states that 'we are facing legal challenges' It seems that it has been done.

'Maintaining the security and privacy of customer and employee data is one of our top priorities. Of the technology we use,' Amazon's senior PR manager, Barbara Agrait, told Motherboard. We will not disclose details, but we are continually exploring and testing new ways to protect customer-related data while respecting employee privacy, as well as applicable personal information protection laws and regulations. We maintain security and privacy while complying with it. '

in Software,   Security, Posted by darkhorse_log