Screen Capture Malware

Periodically snapshots what’s on the victim’s screen. Bypasses input-side defences entirely — if it’s visible to the user, it’s visible to the attacker, including one-time codes and unmasked passwords.