1

In some online banking sites, they provide a virtual onscreen keyboard(the keys will be shifted randomly when each time you open it. Not in the QWERTY order).

If we use such keyboard, any keylogger application can log/capture the keys clicked.

Assume The input element for username and password is not accessible.

Improve this question
3
  • @SteffenUllrich but here, the keys are arranged randomly. In QWERTY virtual keyboard, it can be done. But I would like to know this specific case
    – i--
    Commented Jun 20, 2017 at 17:41
  • 2
    This case is actually covered in the question I've linked too. And it is also covered by screen recording since both mouse position AND screen content gets recorded.
    – Steffen Ullrich
    Commented Jun 20, 2017 at 17:43
  • OS-based key capture should not work if the web keyboard is made correctly, but screen-shot software might be able to read any visual feedback such a keyboard produces, as well as the mouse/touch coords; info which might be enough to decode the password entry.
    – dandavis
    Commented Jun 20, 2017 at 18:14

0

Reset to default

Browse other questions tagged .