UAC-0145 Uses ClickFix CAPTCHAs to Infect Ukrainian Devices with Malware
Russian state-sponsored threat actors from the UAC-0145 sub-cluster, linked to Sandworm and GRU, are using fake CAPTCHA checks on compromised websites to…
Tag: ACR Stealer
ACR Stealer Uses ClickFix Lures to Steal Browser Tokens and Microsoft 365 Files
ACR Stealer, an infostealer active since 2024, is targeting enterprise networks by stealing saved browser passwords, live session tokens, PDFs, Microsoft 365…
ACR Stealer — Malware profile
ACR Stealer was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs,…
Amatera Stealer: Rebranded ACR Stealer
Amatera Stealer is the rebranded version of ACR Stealer, priced from $199/month to $1,499/year. It shares the same codebase and techniques, including…
ClearFake: Web-Inject Cluster Delivering ACR Stealer
ClearFake is a web-inject cluster that has been delivering ACR Stealer since at least March 2025. It was the most prevalent threat…