Chrome on Windows has credential theft bug

.SCF files present ID, password to fetch icons for attack file

Google's Chrome team is working to fix a credential theft bug that strikes if the browser is running on Microsoft Windows."