ACRStealer Concentrated Browser Credential/Cookie Sweep by OptiDrive.exe

Duo Tech@duotech

•updated Aug 17, 2026•1•0•7

Detects a concentrated sweep of multiple browser credential/cookie artifacts (Local State, Login Data, Cookies, History) by a single non-browser process (OptiDrive.exe) within a one-minute window — the ACRStealer credential-theft stage.