MalwareBleeping Computer
8.0 — CRITICAL
Microsoft warns of surge in ACR Stealer attacks on customers
Microsoft has observed a surge in attacks using the ACR Stealer malware to steal browser-stored passwords, authentication tokens, and sensitive documents from its enterprise customers. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
ACR Stealer malware attacks have surged in enterprise customers, targeting browser-stored passwords, authentication tokens, and sensitive documents using various social-engineering methods and WebDAV servers.
⚙️Technical Details
Affected Systems
Windows-based systems
Attack Vectors
ClickFix social-engineering methodWebDAV serversMSHTA (Microsoft HTML Application Host) utility
💥Impact Assessment
Severity: High
Who Is at Risk
Enterprise customers with Windows-based systems
🛡️Recommended Actions
1Enforce filters to block low-reputation or new domains
2Restrict access to online resources that are not required for business operations
3Implement application control rules to restrict launching content from remote resources using tools like PowerShell, Python, mshta.exe, or rundll32.exe
📦Affected Products
Microsoft Windows
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.