Microsoft Defender XDR: Hunting Queries for ACR Stealer
Microsoft shipped three Defender XDR hunting queries to detect ACR Stealer activity, as part of their threat intelligence report.
Tag: Microsoft Defender XDR
ACR Stealer Uses ClickFix Lures to Steal Browser Tokens and Microsoft 365 Files
ACR Stealer, an infostealer active since 2024, is targeting enterprise networks by stealing saved browser passwords, live session tokens, PDFs, Microsoft 365…