password theft news
2 stories
New CSS Attacks Can Break Webmail Defenses to Steal Passwords and Tokens
New research has uncovered a sophisticated class of CSS-based attacks capable of circumventing webmail security mechanisms, allowing adversaries to exfiltrate sensitive data such as user passwords and session tokens. The reported techniques demonstrate a method for bypassing existing defenses in widely used email services, including those offered by Microsoft Outlook, Google Gmail, and Yahoo…
Microsoft Warns of Increased ACR Stealer Malware Attacks
Microsoft has issued a warning regarding a significant increase in attacks leveraging the ACR Stealer malware, which targets enterprise customers to pilfer browser-stored passwords, authentication tokens, and sensitive documents. The observed surge in activity occurred between late April and mid-June, with threat actors employing social engineering tactics, WebDAV servers, and the MSHTA…