user's computer, reading keyboard inputs directly as the user types.

From a technical perspective, there are several categories:

* Hypervisor-based: The keylogger can theoretically reside in a malware hypervisor running underneath the operating system, which thus remains untouched. It effectively becomes a virtual machine. Blue Pill is a conceptual example.
*

1.Previous
3.Next