ACR Stealer Malware — Analysis, Campaigns & Threat Activity

Threat entity extracted from intelligence sources

Frequency
9
occurrences
First Seen
February 10, 2026
Last Seen
July 21, 2026

Related Threat Clusters

Recent Intelligence Reports

  • Russia's GRU Hackers Target Ukraine With Fake CAPTCHAs and an Unkillable Blockchain Server — Techtimes · July 21, 2026
  • ACR Stealer exploits user interaction to steal sensitive data — Feeds.Feedburner · July 17, 2026
  • ACR Stealer uses ClickFix lures and steganography to bypass browser security — Feeds.4Sysops · July 17, 2026
  • ACR Stealer Uses ClickFix Lures to Steal Browser Tokens and Microsoft 365 Files — Thehackernews · July 17, 2026
  • ACR Stealer Uses ClickFix, WebDAV, and Steganography to Steal Browser Credentials and Tokens — Gbhackers · July 17, 2026
  • ACR Stealer: Two observed intrusion chains amid increased threat activity — Blogs.Microsoft · July 16, 2026
  • Fake Claude Code install guides push infostealers in InstallFix attacks — Bleepingcomputer · March 6, 2026
  • The game is over: when “free” comes at too high a price. What we know about RenEngine — Securelist · February 11, 2026

CVSS v3.1 Breakdown