Search:

Of course, the browser itself could simply be modified to log all data sent and received.

Let's not forget hardware keyloggers, which are completely undetectable by software.