Windows 10 Themes can be abused to steal Windows passwords

LASER_oneXM

Level 37
Thread author
Verified
Top Poster
Well-known
Forum Veteran
Feb 4, 2016
2,515
15,622
3,578
53
Germany / Poland
Specially crafted Windows 10 themes and theme packs can be used in 'Pass-the-Hash' attacks to steal Windows account credentials from unsuspecting users.
Windows allows users to create custom themes that contain customized colors, sounds, mouse cursors, and the wallpaper that the operating system will use.
Windows users can then switch between different themes as desired to change the appearance of the operating system.
 

You may also like...