Adversaries may use methods of capturing user input to obtain credentials or collect information. Tactics TA0006 TA0009 Sub-techniques T1056.001 T1056.002 T1056.003 T1056.004 See: MITRE ATT&CK