News
ACR Stealer Uses ClickFix Lures to Steal Browser Tokens and Microsoft 365 Files
3 weeks ago
ACR Stealer Uses ClickFix Lures to Steal Browser Tokens and Microsoft 365 Files
By info@thehackernews.com (The Hacker News)
ACR Stealer, an infostealer in circulation since 2024, is walking out of enterprise networks with saved browser passwords, live session tokens, PDFs, Microsoft 365 documents, and files from synced OneDrive and SharePoint folders. It gets in because someone pasted a command into a Run box and pressed Enter. Microsoft laid out two of the delivery chains on Thursday. Its Defender Experts team, the
More from The Hacker News
Malicious LiteLLM Releases Tied to Trivy Hack May Have Exposed 2,100+ Organizations
4 hours from now
SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code
4 hours from now
ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM Access
3 hours from now
Cisco ASA and FTD Flaw Exploited in the Wild Can Trigger Remote DoS
2 hours from now
Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attack
7 hours ago