Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.
Sign up to join this community
In conjunction with this question:
Keystroke logging and virtual machines
I'd like to ask if for example, while using the VM, could the keylogger (keylogger inside host) still log if I was using a virtual (soft) keyboard?
Other info:
This screenshot was from an Android emulator with soft keyboard settings turned on.
Some keyloggers capture inputs to virtual keyboards by taking screenshots whenever the mouse clicks. This is still effective if the host has a keylogger and the guest VM is using a virtual keyboard.
The host OS receives the click from the mouse and then passes that event on to the VM. The keylogger on the host could take a screenshot at that time.
Screenshots are just one way of capturing inputs to keyloggers, but it's the example you are looking for.
Screen session otherwise known as video capture software recording the entire screen would also be a simply way of thwarting a virtual keyboard. Ever see a video session captured and replayed on YouTube or similar? Pretty straight forward.
Now, do such while running inconspicuously in the background with no one noticing may prove problematic but certainly should be considered.
