https://zwclose.github.io/HP-keylogger/HP had a keylogger in the keyboard driver. The keylogger saved scan codes to a WPP trace. The logging was disabled by default but could be enabled by setting a registry value (UAC required). Get the list of affected hardware and patch here: https://support.hp.com/us-en/document/c05827409
...Written on December 7, 2017
Wow, looking at the source code shown is scary, but it's even scarier to read the comments and learn that this module is 154MB in size and could contain all kinds of other possibly invasive or intrusive stuff. Zounds! Thanks for sharing, Bree.
--Ed--
I read it on bleepingcomputer. That's the second time HP does that. Intentional?
Quote