From late April 2026 to mid-June 2026, Microsoft Defender Experts observed increased ACR Stealer activity across customer ...
Socket traced the module to 222 repos across 190 accounts staging Vidar, RATs, and XMRig miners ...
In Operation Muck and Load, over 200 GitHub repositories serve a Go module that leads to Windows malware infections.