[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <2e18a850705171318s2f1d7732jb207566603e9fe74@mail.gmail.com>
Date: Fri, 18 May 2007 01:48:32 +0530
From: "aditya kuppa" <aditya1010@...il.com>
To: bugtraq@...urityfocus.com
Subject: Defeating Citibank Virtual Keyboard protection using screenshot method
How about this Trojan ;)
http://www.hispasec.com/laboratorio/troyano_video_en.htm
looks great method to get the Password if the inputs are
scrambled,rotated randomly after each entry etc.
Combination of trojan like this +a simple keylogger +a MITM can defeat
all possible authentication mechanism Multi Factor,channel
authentications like OTP,SMS based logging etc
Regards
AK
Researcher
Powered by blists - more mailing lists