Personalization is one of the most sought-after features by Windows users. From changing the wallpaper, colors and icons to making a radical change in the appearance of the operating system, this is one of the first settings that users usually apply after installing the OS on their computers. Windows 10 allows us to customize the appearance of the operating system from “themes”, which we can easily find on the Internet. However, it may not be a very good idea to use them.
Windows allows users to easily create their own themes to customize Windows. For example, it allows you to choose the background, or backgrounds, that you want to use in the theme, customize the colors, change the cursors, the sounds, etc. In this way, instead of having to change these features manually, one by one, we can change the appearance of our entire operating system with a single click in seconds.
We can have as many themes as we want installed in Windows. From the Settings menu, within Personalization> Themes we will be able to change from one to the other with a single click.
Why should you be careful with Windows 10 themes?
A failure in Windows 10 theme creation feature, discovered by cybersecurity researcher Jimmy Bayne, may allow hackers to modify custom themes that, once installed, trick users into using their account name. Microsoft and password on spoofed login pages.
This technique does not necessarily generate red flags for a common user, as some legitimate Windows 10 themes force a login after installation.
The attack known as (Pass the Hash) does not steal passwords literally, but their hash, algorithms that in alphanumeric format represent a summary of it. In any case, with the hashes in their possession, it is not difficult for cybercriminals to obtain the passwords.
The Pass the Hash attack uses a technique in which an attacker captures login credentials on one system, and then those captured credentials are used to authenticate to other computers on the network.
