Defeating Virtual Keyboards
Date of release: 09/12/2008
Around mid of year 2005 I was bit intrigued to write a proof-of-concept keylogger
to capture texts emulated using virtual keyboards. The PoC keylogger was publicly
released on 5th Aug, 2005 to demonstrate the hack for a particular banking site
however the fact that remains same is any site which uses similar VK or OSK can
be defeated. As you read this whitepaper, you’ll understand how this particular
approach of defeating OSK and VK cannot be easily tricked unlike ordinary keyloggers.
This paper was public released by Hakin9 magazine in their Nov, 2007 issue and
as per the copyrights contract I am allowed to publish the free copy after six months
of their release.
[Download]