Re: Defeating Citibank Virtual Keyboard protection using screenshot method
- From: Reversemode <advisories@xxxxxxxxxxxxxxx>
- Date: Wed, 09 May 2007 19:53:02 +0200
Hi Yash,
Severity: Critical[CUT]
Platforms Affected:
Microsoft Corporation: Windows 98 Any version
Microsoft Corporation: Windows Me Any version
Microsoft Corporation: Windows XP Any version
Microsoft Corporation: Windows 2000 Any version
...
You are talking about a documented feature, neither a flaw nor a
vulnerability. How can be an API rated?
Vendor Response:
No Response from Vendor yet
I cannot imagine Windows with BitBlt disabled... :)
This is a known method widely used in banking trojans since a long time
ago.
Anyway, thanks for sharing your research.
cheers,
- Rubén.
- References:
- Prev by Date: Re: [security bulletin] HPSBTU02211 SSRT071326 rev.1 - HP Tru64 UNIX Running the dop command, Local Execution of Arbitrary Code with Privilege Elevation
- Next by Date: Re: Defeating Citibank Virtual Keyboard protection using screenshot method
- Previous by thread: Defeating Citibank Virtual Keyboard protection using screenshot method
- Next by thread: Re: Defeating Citibank Virtual Keyboard protection using screenshot method
- Index(es):
Relevant Pages
|
