Which malware type captures a target's sensitive data such as IDs and passwords from a web browser form or page?

• A. HTML Injection
• B. Form Grabber
• C. Dreambot Trojans
• D. Rootkit Trojans

Answer: (A)

Form data theft from browser forms is accomplished by form grabbers, malware specifically built to monitor and capture data you enter into web pages. These tools run on the infected host and intercept credentials as you submit them, often hooking into the browser to grab information like usernames and passwords before it’s sent to the server. HTML injection, while it can be used to phish or alter a page to trick users, is an attack technique for injecting content rather than a dedicated malware type focused on stealing form data. Dreambot Trojans are botnet clients used for remote control and automation, not primarily for stealing form data. Rootkit Trojans hide themselves to avoid detection, not to harvest credentials. So the form grabber best fits the scenario of capturing sensitive data from a web browser form or page.