Some banks and kiosks have used on-screen keyboards in an effort to thwart keystroke loggers. Apparently the bad guys have caught on to that. There is an article on this here, and video posted here. When you connect to a bank site in the list of targeted sites, the malware will take a screenshot at every mouse click. The image will include a mark on the screen where you clicked.