Meh
Contrary to what the article says, a Smart Card and pin wouldn't really get you into anything interesting, it certainly won't give you access to anything classified, and most systems that house sensitive unclassified info require some additional login credentials. Of course, if the trojan is capturing all that too, they may get some intel value out of it if they luck upon infecting the right user, ie, some clueless General who will then come up with even more asinine security policies and training for the rest of us as a cover for his own ineptitude.
Biting the hand that feeds IT
