Re: Defeating Citibank Virtual Keyboard protection using screens
Hi Yash,
> Severity: Critical
> Platforms Affected:
>
> Microsoft Corporation: Windows 98 Any version
> Microsoft Corporation: Windows Me Any version
> Microsoft Corporation: Windows XP Any version
> Microsoft Corporation: Windows 2000 Any version
[CUT]
....
You are talking about a documented feature, neither a flaw nor a
vulnerability. How can be an API rated?
>Vendor Response:
>No Response from Vendor yet
I cannot imagine Windows with BitBlt disabled... :)
This is a known method widely used in banking trojans since a long time
ago.
Anyway, thanks for sharing your research.
cheers,
- Rub幯.
討論串 (同標題文章)
完整討論串 (本文為第 1 之 14 篇)：