Git for Windows versions prior to 2.53.0(2) contain a vulnerability that allows attackers to obtain a user's NTLM hash by tricking them into cloning from a malicious server. The weakness of NTLM hashing enables attackers to brute-force the user's account credentials. This social engineering attack exploits the trust users place in git clone operations. The vulnerability has been patched in version 2.53.0(2). Organizations using Git for Windows should update immediately to prevent credential theft.