[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Defeating Citibank Virtual Keyboard protection using screenshot method

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Defeating Citibank Virtual Keyboard protection using screenshot method
From: "aditya kuppa" <aditya1010@xxxxxxxxx>
Date: Fri, 18 May 2007 01:48:32 +0530

How about this Trojan ;)
http://www.hispasec.com/laboratorio/troyano_video_en.htm
looks great method to get the Password if the inputs are
scrambled,rotated randomly after each entry etc.
Combination of trojan like this +a simple keylogger +a MITM can defeat
all possible authentication mechanism Multi Factor,channel
authentications like OTP,SMS based  logging   etc
Regards
AK
Researcher

Follow-Ups:
- Re: Defeating Citibank Virtual Keyboard protection using screenshot method
  - From: Bojan Zdrnja

References:
- Re: Defeating Citibank Virtual Keyboard protection using screenshot method
  - From: mailbox@xxxxxxxxxxxxxx

Prev by Date: [security bulletin] HPSBST02214 SSRT071422 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS07-023 to MS07-029
Next by Date: [OpenPKG-SA-2007.013] OpenPKG Security Advisory (png)
Previous by thread: Re: Defeating Citibank Virtual Keyboard protection using screenshot method
Next by thread: Re: Defeating Citibank Virtual Keyboard protection using screenshot method
Index(es):
- Date
- Thread