ACRStealer Malware Abuses Google Docs as C2 to Steal Login Credentials

cybernoz.com

Factuality

Ownership

ACRStealer Malware Abuses Google Docs as C2 to Steal Login Credentials

The ACRStealer malware, an infostealer disguised as illegal software such as cracks and keygens, has seen a significant increase in its distribution since the beginning of 2025. Initially distributed in limited volumes in mid-2024, this malware has now gained traction, with February’s activity levels matching those of January, signaling a sharp upward trend. Security researchers from AhnLab Security Intelligence Center (ASEC) have identified its…