Although on-screen or virtual keypads are frequently proposed as the
solution to keylogging, they were broken in 1997 or earlier.
Simply load a driver that takes a 10 x10 pixel snapshot of the screen under
the mouse, and send (or store) the bitmap to an attacker friendly location.

In a shared env...

[ more ]