The initial stage of a breach is the capture of login information through various social engineering methods, such as phishing or clickjacking. Keyloggers and screen capturing malware are still in use to intercept endpoints and record information. While traditional antivirus and firewalls have circumvented some threats, keylogger software can bypass these security measures by changing its form to further infect other endpoints in your infrastructure.