value:  BlackEnergy has used a plug-in to gather credentials stored in files on the host by various software programs including The Bat! email client Outlook and Windows Credential Store. 
name: Unsecured Credentials: Credentials In Files