On: The “Cobra Effect” that is disabling paste on pass...

[blazespin]

Cause key loggers don't track mouse clicks. Lol.

Two factor is their best bet.

[jsudhams → blazespin]

VIrtual keyboard changes the character location every time it shows so unless u record click for log time or screen record it is difficult

[takeda → jsudhams]

Malware can still be capable to take screenshot of the screen. If it would log mouse clicks I would imagine it would at least take screenshot if not a video.

[underwater → takeda]

Knowing when to take a screenshot, uploading and storing it, and extracting the password is a lot more work than dumping a text file and grepping for bofa.com.

[Retra → underwater]

Psh, only if you're not also logging keys.

[leshow → underwater]

you just need to take a screenshot when the mouse clicks

[okletsgoyayok → underwater]

Yeah, this is really shitty malware design.

[azinman2 → jsudhams]

Wow that's a terrible UX -- randomized keyboard every time? Talk about an incentive to NOT login!

[TeMPOraL → jsudhams]

Does it randomize its DOM elements too?