Fig. 5From: Using IM-Visor to stop untrusted IME apps from stealing sensitive keystrokesColluding attack. To lauch such attack, an IME app just needs to send sensitive text to a colluding app before it commits any text to a user appBack to article page