topic keylogger trojan in Operating System - Microsoft

keylogger trojan

'chris' — Wed, 06 Jan 2010 04:10:17 GMT

hi

Can keylogger trojan spy the password as you type on a virtual keyboard?

Re: keylogger trojan

Michal Kapalka (mikap) — Thu, 07 Jan 2010 07:51:23 GMT

hi,

what does mean " virtual keyboard"

if you mean virtual keyboard, is a connected via ILO or RSA, and you type the password inside the Windows (os) screen so i think is the same, situation if you type it on the local keyborad.

so i think yes.

mikap

Re: keylogger trojan

vin-it — Thu, 07 Jan 2010 19:12:47 GMT

virtual keyboard .. you mean .. you have to click each character using mouse .. ?
keyloggers can record keyboard keystrokes , but not mouse clicks ;)

Re: keylogger trojan

'chris' — Thu, 07 Jan 2010 19:34:48 GMT

>virtual keyboard .. you mean .. you have to click each character using mouse .. ?
>keyloggers can record keyboard keystrokes , but not mouse clicks ;)

Yep, I mean to click each character using mouse.

Re: keylogger trojan

vin-it — Thu, 07 Jan 2010 19:40:47 GMT

clicking char in virtual keyboard is safe.
keyloggers can not find it as you are not pressing keyboard keys.

Re: keylogger trojan

Morales C — Fri, 22 Jan 2010 17:32:08 GMT

Yes. Virtual keyboards have been defeated by trojans, even if the virtual keys are randomized for each new session. There are trojans since about 2006 that either record video when on specific websites or take screen shots of an area where a mouse click occurred. See these websites/articles for more info.

2006 - "New technique [in use] against virtual keyboards"
www.hispasec.com/laboratorio/New_technique_against_virtual_keyboards.pdf

2007 - "Hacker demos how to defeat Citibank's virtual keyboard"
blogs.zdnet.com/security/?p=195

2009 - "Virtual Keyboard and the Fight Against Keyloggers"
palisade.plynt.com/issues/2009Feb/fight-against-keyloggers/

Re: keylogger trojan

vin-it — Fri, 22 Jan 2010 17:38:51 GMT

that is making me worry while using netbanking.