Citibank tries virtual keyboard to thwart phishers

The U.K. division of global giant Citibank has introduced an on-screen "keyboard" for its online banking customers in an attempt to foil some types identity theft.

Although customers type their account username into a typical form, their password must be entered by clicking on an on-screen keyboard similar to the one within Windows (from the Start menu, select "Run," enter "osk" and press Enter).

According to Citibank, the change is "to reduce the chance of malicious software attempting to record keystrokes and steal your details."

While phishers may need time to replicate an on-screen keyboard, the move seems aimed at spyware-style key loggers that are dropped on systems (often by phishers) to monitor a machine and send all typed characters to the attacker.