ACR Stealer Uses ClickFix Lures to Steal Browser Tokens and Microsoft 365 Files

Home / Tech / ACR Stealer Uses ClickFix Lures to Steal Browser Tokens and Microsoft 365 Files

ACR Stealer Uses ClickFix Lures to Steal Browser Tokens and Microsoft 365 Files

July 17, 2026 dirk 0 Comments 3 tags

ACR Stealer Uses ClickFix Lures to Steal Browser Tokens and Microsoft 365 Files

ACR Stealer, an infostealer in circulation since 2024, is walking out of enterprise networks with saved browser passwords, live session tokens, PDFs, Microsoft 365 documents, and files from synced OneDrive and SharePoint folders.

It gets in because someone pasted a command into a Run box and pressed Enter. Microsoft laid out two of the delivery chains on Thursday. Its Defender Experts team, the

Source: The Hacker News

Explore More

Corp MDM Spyware Targets Logistics Firms, Steals New SMS and Redirects Calls

Corp MDM Spyware Targets Logistics Firms, Steals New SMS and Redirects Calls The logistics sector has become the target of a new malicious cyber campaign that distributes an Android spyware

Attack Update: Top 5 Attack-IPs auf doode.info – 02.10.2026

Watchtower Attack Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. 193.32.162.135 — 974 requests (recent log) 89.167.35.212 — 913 requests (recent log) 129.146.127.121 — 379 requests (recent

Chinese-Made Zbtlink Routers Ship With Backdoor That Opens Unauthenticated Root Shells

Chinese-Made Zbtlink Routers Ship With Backdoor That Opens Unauthenticated Root Shells Cybersecurity researchers have disclosed details of a “factory-shipped backdoor” implanted in at least 20 Chinese router models from Zbtlink.