Keystroke logging in virtual machine with soft keyboard

Question

In conjunction with this question:

I'd like to ask if for example, while using the VM, could the keylogger (keylogger inside host) still log if I was using a virtual (soft) keyboard?

screenshot

Other info:

This screenshot was from an Android emulator with soft keyboard settings turned on.

potentially relevant: https://security.stackexchange.com/questions/172135/are-virtual-keyboards-not-necessary-anymore-to-protect-against-keyloggers — schroeder, Oct 26 '17 at 09:37

score 4 · Accepted Answer · answered Oct 26 '17 at 09:36

4

Some keyloggers capture inputs to virtual keyboards by taking screenshots whenever the mouse clicks. This is still effective if the host has a keylogger and the guest VM is using a virtual keyboard.

The host OS receives the click from the mouse and then passes that event on to the VM. The keylogger on the host could take a screenshot at that time.

Screenshots are just one way of capturing inputs to keyloggers, but it's the example you are looking for.

answered Oct 26 '17 at 09:36

schroeder

123,438
55
284
319

okay got it I understand, so having a virtual keyboard via vmware doesn't help at all. thank you – Ghost Oct 26 '17 at 09:54
3

@Ghost: I wouldn't say they don't help at all, but they are certainly not 100%. – dandavis Oct 26 '17 at 10:20

score 0 · Answer 2 · answered Oct 26 '17 at 19:32

0

Screen session otherwise known as video capture software recording the entire screen would also be a simply way of thwarting a virtual keyboard. Ever see a video session captured and replayed on YouTube or similar? Pretty straight forward.

Now, do such while running inconspicuously in the background with no one noticing may prove problematic but certainly should be considered.

answered Oct 26 '17 at 19:32

Brent E

101

that's no longer a "keystroke logger" though – schroeder Oct 26 '17 at 20:00

Keystroke logging in virtual machine with soft keyboard

2 Answers2