[转载]Defeating Citibank Virtual Keyboard Protection Using Screenshot Method

原始出处：http://www.tracingbug.com/index.php/articles/view/23.html

This keyboard will display a keys in random position in a virtual keyboard on the screen where it makes little difficult for password capture. This only gives confidence for end user from key loggers not from other methods. Local attacker can use Win32 API’s to capture using screen shot method and obtain sensitive information including Credit Card/Debit Card (Suvidha Account), IPIN and misuse it.