0
votes
2answers
80 views

How can a keylogger gather & transmit data from a client-only webapp run from file?

For a client-side only webapp run from file, how can a keylogger gather data and then transmit it? In this scenario, please limit the scope to the client code only, that an attacker somehow has ...
3
votes
3answers
190 views

What are some ways to steal a password/PIN using this system?

http://cups.cs.cmu.edu/soups/2007/posters/p147_lim.pdf Essentially uses an on-screen keypad that does not show the complete keypad numbers at a time. The image is refreshed at the rate of the ...
3
votes
5answers
408 views

Can web application do anything to prevent risk from client-side malware?

Client side malware (keyloggers, screenscrapers etc.) is a great risk. It can't be effectively stopped from side of ordinary application. Only users themselves can do some measures to prevent risk ...