From late April 2026 to mid-June 2026, Microsoft Defender Experts observed increased ACR Stealer activity across customer ...
Socket traced the module to 222 repos across 190 accounts staging Vidar, RATs, and XMRig miners ...