Microsoft has observed a significant increase in attacks utilizing the ACR Stealer malware. This infostealer targets enterprise customers, aiming to exfiltrate browser-stored passwords, authentication tokens, and sensitive documents, including those from Microsoft 365, OneDrive, and SharePoint. The malware often gains initial access through ‘ClickFix’ lures, where users are tricked into executing commands.