Windows 10 Themes can be abused to steal Windows passwords


Level 37
Feb 4, 2016
Specially crafted Windows 10 themes and theme packs can be used in 'Pass-the-Hash' attacks to steal Windows account credentials from unsuspecting users.
Windows allows users to create custom themes that contain customized colors, sounds, mouse cursors, and the wallpaper that the operating system will use.
Windows users can then switch between different themes as desired to change the appearance of the operating system.