A Deep Dive Into Credential Gathering Attack Patel, Jiya credential theftcredential gathering attacksFIDO2WebAuthnbrowser attestationShamir Secret Sharingaccount recoveryzero-knowledge proofsDirect Anonymous AttestationmalwareLSASSpass-the-hashKerberosInformation Sciences and TechnologyB SCredentials are fundamental to digital identity. They are the means by which users prove who they are and gain access to services, portals, and online platforms. Identity and Access Management (IAM) encompasses the technologies and policies governing the identification, authentication, and authorization of users across computer networks. While passwords and PINs are the most familiar form of credentials, many others exist in modern systems such as password hashes, Kerberos tickets, payment card data, Windows NT hashes, OAuth tokens, and cryptographic certificates, among others. This thesis examines how credentials are stolen, often without any user interaction, how malware lo cates and extracts them from memory, disk, and network traffic, and how attackers leverage compromised credentials once obtained. Because credentials serve as the entry point for a wide range of cyberattacks, understanding why current systems make credential theft relatively straightforward is essential to designing more robust defenses. The second chapter surveys existing protection mechanisms, revealing critical gaps in how credential security is currently approached. A key observation motivating this work is that credential theft is not a monolithic problem, that is, different credential types are stored differently, stolen through different techniques, and exploited in different ways. Yet prevailing defense strategies tend to treat them uniformly, a significant misconception that leaves many attack surfaces inadequately protected. The final chapter proposes a new approach by extending the FIDO2 authentication standard. Rather than applying a one-size-fits-all defense, this work targets a specific credential scenario and develops a tailored security model that addresses shortcomings left unresolved by general-purpose defenses available today.Peng Liu, Thesis SupervisorEdward J Glantz, Thesis Honors Advisorrestricted_to_institution2026-04-01T00:48:52Zhttps://honors.libraries.psu.edu/catalog/10014jfp5939