Hacker News Reader

So, in the described scenario, the password never shows up in the keyloggers log. Works as intended.

Keyloggers track mouse clicks just as well as keystrokes. They had the password the entire time since the site doesn't randomize the keyboard layout.

Another comment was mentioning malware that uses screenshot-on-click :<