1

In some online banking sites, they provide a virtual onscreen keyboard(the keys will be shifted randomly when each time you open it. Not in the QWERTY order).

If we use such keyboard, any keylogger application can log/capture the keys clicked.

Assume The input element for username and password is not accessible.

i--
  • 225
  • 2
  • 10
  • @SteffenUllrich but here, the keys are arranged randomly. In QWERTY virtual keyboard, it can be done. But I would like to know this specific case – i-- Jun 20 '17 at 17:41
  • 2
    This case is actually covered in the question I've linked too. And it is also covered by screen recording since both mouse position AND screen content gets recorded. – Steffen Ullrich Jun 20 '17 at 17:43
  • OS-based key capture should not work if the web keyboard is made correctly, but screen-shot software might be able to read any visual feedback such a keyboard produces, as well as the mouse/touch coords; info which might be enough to decode the password entry. – dandavis Jun 20 '17 at 18:14

0 Answers0