A Survey of Keylogger and Screenlogger Attacks in the Banking Sector and Countermeasures to Them

Abstract

Keyloggers and screenloggers are one of the active growing threats to user's confidentiality as they can run in user-space, easily be distributed and upload information to remote servers. They use a wide number of different techniques and may be implemented in many ways. Keyloggers and screenloggers are very largely diverted from their primary and legitimate function to be exploited for malicious purposes compromising the privacy of users, and bank customers notably. This paper presents a survey of keylogger and screenlogger attacks to increase the understanding and awareness of their threat by covering basic concepts related to bank information systems and explaining their functioning, as it presents and discusses an extensive set of plausible countermeasures.

Dataset Construction and Analysis of Screenshot Malware

“…Moreover, we found a behaviour that we did not observe in Section B, which is the capture of the zone around the mouse click, which is an option proposed by Pupy. This enables sending smaller packets, and this can be useful in attacks targeting online banking users which enter their password using a virtual keyboard, as proposed by many banks [63].…”