keylogger trojan

['chris']

hi

Can keylogger trojan spy the password as you type on a virtual keyboard?

[Michal Kapalka (mikap) · Accepted solution]

hi,

what does mean " virtual keyboard"

if you mean virtual keyboard, is a connected via ILO or RSA, and you type the password inside the Windows (os) screen so i think is the same, situation if you type it on the local keyborad.

so i think yes.

mikap

[vin-it]

virtual keyboard .. you mean .. you have to click each character using mouse .. ?
keyloggers can record keyboard keystrokes , but not mouse clicks ;)

['chris']

>virtual keyboard .. you mean .. you have to click each character using mouse .. ?
>keyloggers can record keyboard keystrokes , but not mouse clicks ;)


Yep, I mean to click each character using mouse.

[vin-it]

clicking char in virtual keyboard is safe.
keyloggers can not find it as you are not pressing keyboard keys.

[Morales C]

Yes. Virtual keyboards have been defeated by trojans, even if the virtual keys are randomized for each new session. There are trojans since about 2006 that either record video when on specific websites or take screen shots of an area where a mouse click occurred. See these websites/articles for more info.

2006 - "New technique [in use] against virtual keyboards"
www.hispasec.com/laboratorio/New_technique_against_virtual_keyboards.pdf

2007 - "Hacker demos how to defeat Citibank's virtual keyboard"
blogs.zdnet.com/security/?p=195

2009 - "Virtual Keyboard and the Fight Against Keyloggers"
palisade.plynt.com/issues/2009Feb/fight-against-keyloggers/

[vin-it]

that is making me worry while using netbanking.