Microsoft has observed a surge in attacks using the ACR Stealer malware to steal browser-stored passwords, authentication ...
Chrome still has the reputation, but my own benchmark testing identified the real culprit.