Password Managers are brilliant!

They allow users to create and use complex passwords because they give us a nice secure place to store them. Using Password managers also can also prevent users from writing them down or reusing passwords, which is a huge deterrent against hackers looking to compromise your accounts. It’s a win, win….or is it?

There is a slight weakness to some of them, which could allow attacks to extract your passwords without having to break into the manager itself.

The answer: Get-Clipboard

Get-Clipboard is a PowerShell command which allows you to view or extract what is stored in the clipboard. This got me thinking….Could this be used against me? I know that certain advance persistent threats (APT) use PowerShell for malicious purposes, so could this be one of them.

I then started to think what an average user would copy and paste. It would mainly be things…