WebApp Sec mailing list archives

Re: Defeating Citi-Bank Virtual Keyboard Protection


From: Saqib Ali <docbook.xml () gmail com>
Date: Fri, 12 Aug 2005 09:11:54 -0700

Virtual keyboards don't help much. Tools similar to what you have
developed have existed for a while now. See
http://www.lostpassword.com/asterisk.htm  , it does the same thing as
your CitiPassLogger.exe . And it works regardless of the input method.


On 8/5/05, Debasis Mohanty <debasis () hackingspirits com> wrote:
Recently I discovered a method to defeat the much hyped Citi-Bank Virtual
Keyboard Protection which the bank claimed that it defends the customers
against malicious programs like keyloggers, Trojans and spywares etc.

-- 
In Peace,
Saqib Ali
http://www.xml-dev.com/blog/
Consensus is good, but informed dictatorship is better.


Current thread: