ACR Stealer

ACR Stealer: Two observed intrusion chains amid increased threat activity

1. Executive summary From late April to mid-June 2026, Microsoft Defender Experts observed two prevalent intrusion chains delivering ACR Stealer, an information-stealing malware-as-