Fig. 11
From: Using IM-Visor to stop untrusted IME apps from stealing sensitive keystrokes
The defense of IM-Visor on repackaged IME apps. The repackaged IME apps are capable of uploading user names and passwords to the remote server without IM-Visor. However, with the IM-Visor protection, they cannot leak out sensitive information. a Email log-in using the repackaged Sogou IME. b WeChat log-in using the repackaged QQ IME. c AliPay log-in using the repackaged TouchPal IME