Windows 10: Windows attack can steal your logged-in username and password

You're welcome*Smile

 

Do I need to do what dmex shared or what Cliff S linked or both to solve this issue?

 

Personally this kind of stuff & networking is my weak point.
I would want to know if it would have any adverse effects connecting to Microsoft's or any of my 3rd party software's(for updates) servers first.
The best you could do, seeing this only effects Internet Explorer and Edge, and I guess Cortana/Windows Search, is use those two browsers for know-bookmarked sites, and use either Chrome or Firefox for everything else, until Microsoft eventually addresses this(if they ever do).

 

I went even a bit further. After trying to set Edge as my main browser, I reverted back to my setup before this. Using FF as main browser and Edge (IE) just for some sites that still demands them.

Until this mess is cleared up.

 

I just posted a question about this Windows Credential Leak Flaw in Edge, IE, and Cortana/Windows Search in the Malwarebytes Forum.
I asked:

When and if I get an answer, if Malwarebytes Anti Exploit protects against this, I will post here it here.

 

Great information ....and will be interested in MB's response Cliff *Smile

 

Me 1st too! As I prefer to use Windows as Microsoft designed it, for an optimal experience, with all it's defaults & permissions, this really interest me in my browser use and search habits.

 

Plus I've never installed Malwarebytes Anti Exploit , as I have about 4 programs already that I use for protection and checking for poop. This might just make me more interested in installing it. I only have MalwareBytes Pro installed. (Anti Malware)

Update: I did make that change in my Group Policy Editor, just to see what it will do, and what effect it might have on some web sites.

 

Exactly! I was into using Edge since like last month or so. But am also using MBEA, so this would be acceptable.

Thanks again Cliff, for digging into it!

 

Mike, MBAE is totally different story. It takes almost no resources. Its alternative in MS EMET.

 

Yes I know Andre, but its the only product I run from MB ....I have OTHER programs installed for protection. *Smile

 

Has anyone tested if Malwarebytes Anti-Exploit Free protects you from this? I don't know how to test this without risking my Microsoft account information.

 

No need to test. If you would read the previous posts, you would have seen I have asked about this in the Malwarebytes Forums, and will post(with a link of course) the answer, when I get one.

I really recommend NOT testing, although there are two sites where you can test, but if they find something or not, you will need to change your passwords(the test page even states this).

Understanding the Windows Credential Leak Flaw and How to Prevent It

 

Is there a way to implement this in Windows 10 Home since it doesn't have the GPE?

 

Read the comments section at that link*Wink