windows com automation serves number of practical usesfrom interacting with network-based services to embedding microsoft excel spreadsheet into your own application all versions of windows from xp forward allow you to embed an internet explorer com object into applicationsand we'll take advantage of this ability in this using the native ie automation objectwe'll create man-in-the browser-style attack where we can steal credentials from website while user is interacting with it we'll make this credential-stealing attack extendableso that several target websites can be harvested the last step will use internet explorer as means to exfiltrate data from target system we'll include some public key crypto to protect the exfiltrated data so that only we can decrypt it internet exploreryou sayeven though other browsers like google chrome and mozilla firefox are more popular these daysmost corporate environments still use internet explorer as their default browser and of courseyou can' remove internet explorer from windows system -so this technique should always be available to your windows trojan