Windows 10 custom themes can be used to steal user credentials