Hacker News new | ask | show | jobs
by ryanlol 3045 days ago
On Windows they are protected with DPAPI, so you won't be able to decrypt them without having access to the user account that "owns" the passwords.

Of course, this helps you very little when the malware is running under your user account and uses DPAPI calls to decrypt the passwords.

https://msdn.microsoft.com/en-us/library/ms995355.aspx