Hacker News Reader

In fact, if you notice when you log in the next time, (for many people) your browser may offer to autocomplete your password and bypass the mouse-driven keyboard, so it's definitely not even hard to thwart.

View on HN

So, in the described scenario, the password never shows up in the keyloggers log. Works as intended.

Keyloggers track mouse clicks just as well as keystrokes. They had the password the entire time since the site doesn't randomize the keyboard layout.

Another comment was mentioning malware that uses screenshot-on-click :<

Reply on news.ycombinator.com