Key loggable

[Cla55ifi3xd]

Many people get their passwords and other information stolen by just typing them in. Some one else where can see what you have typed and use that to take over you accounts and cause much havoc. I’m wondering if the on screen keyboard is loggable the same as actual keystrokes. 

[Hiitchy]

The program logging the keys would have to be able to see that a process that contains a virtual keyboard is running and that it is in fact a virtual keyboard. It's an interesting thought though.

[Shypaperbag]

It's been a while but I think AutoHotkey can be configured to pickup either hardware key strokes or software strokes. So to do logging for an on screen keyboard all you would need to do is surreptitiously install a AutoHotkey like software and shortcut every key to some logging script,

[EG!]

The output of a regular keyboard vs a virtual keyboard is nearly the same.

Phishing is still the biggest problem of getting your credentials stolen but keyloggers will just pick the output of those keyboards up the input doesn't matter.

[Cla55ifi3xd]

1 minute ago, EG! said:

The output of a regular keyboard vs a virtual keyboard is nearly the same.

Phishing is still the biggest problem of getting your credentials stolen but keyloggers will just pick the output of those keyboards up the input doesn't matter.

SO if a website were to put a vurtual keyboard under there login would it be less likely to be logged. 

[EG!]

1 minute ago, Cla55ifi3xd said:

SO if a website were to put a vurtual keyboard under there login would it be less likely to be logged. 

Yes.

If the logger is on your pc then yes the logger on your pc will only register the clicks you do with your mouse.

(I thought you were reffering to the windows virtual keyboard)

[ImNotThere]

4 minutes ago, Cla55ifi3xd said:

SO if a website were to put a vurtual keyboard under there login would it be less likely to be logged. 

if the keyboard is client side then yes, it will be logged

if it is server side then probably not, unless it's a locally hosted website at which point it will

[Cla55ifi3xd]

I was but your reply made me expand the idea. 

[Joveice]

I have seen programs create temp desktops where you type the password to prevent keyloggers from picking it up, not sure where I got it from.