New Malware Is Stealing Passwords Saved in Your Web Browser

Microsoft has warned about a significant increase in attacks using malware called ACR Stealer. This harmful software targets computers to steal passwords that people have saved in their web browsers, authentication tokens that keep you logged into websites, and sensitive documents stored on the computer. The attacks are primarily focused on business customers, but the same tactics could affect home users as well. This threat mainly affects people who save their passwords directly in web browsers like Chrome, Edge, Firefox, or Safari.

If you use your browser's built-in password manager to remember your login information for email, banking, social media, or shopping sites, that information could be at risk if your computer gets infected. Business users are currently the main targets, but families should still take precautions.

Here is what you should do right now:

1. Stop saving passwords directly in your web browser if possible.
2. Consider using a dedicated password manager like Bitwarden, 1Password, or Dashlane instead, which offer better security protections.
3. Make sure your antivirus software is up to date and running.
4. Be extremely careful about downloading files or clicking links in emails, even if they appear to come from someone you know.
5. Enable two factor authentication on all important accounts like email, banking, and social media. For long term protection, teach your family to be cautious about what they download and click. Never download software from pop up ads or unfamiliar websites. Keep your operating system and all programs updated. Consider using a password manager designed specifically for security rather than relying on your browser to remember everything. Regular backups of important files to an external drive can also help you recover if malware does infect your computer.