Microsoft Warns Windows Users—Change Your Browser As New Attacks Underway

Forbes - Mar 17th, 2025
Open on Forbes

Microsoft has issued a new warning to Chrome users about a sophisticated malware attack known as StilachiRAT, which targets credentials stored in the browser, digital wallet information, and system data. This warning, issued by Microsoft's Incident Response team, arises amidst Microsoft's efforts to convert Chrome users to its Edge browser. The malware's capabilities are extensive, including the ability to extract and decrypt saved credentials from Chrome and monitor RDP sessions for lateral network movement.

This warning comes at a time when Microsoft is intensifying its push to lure Chrome users to Edge, raising questions about the impartiality of the warning. Despite these efforts, Chrome remains the dominant desktop browser. Microsoft suggests using Edge and other browsers with SmartScreen capabilities to mitigate risk. Google's response to this threat is awaited as it works to address any vulnerabilities. Additionally, Microsoft recommends using security measures such as Safe Links, Safe Attachments, and enabling network protection in Microsoft Defender for enhanced security.

Story submitted by Fairstory

RATING

6.6
Fair Story
Consider it well-founded

The article effectively highlights a significant cybersecurity threat to Chrome users, leveraging Microsoft's warning as a primary source. It is timely and addresses a topic of public interest, given the widespread use of Chrome and the potential risks to personal data. However, the story could benefit from more balanced reporting by including perspectives from Google and independent cybersecurity experts. The reliance on Microsoft's perspective creates a potential bias, particularly in the context of promoting Edge. While the article is clear and accessible, it lacks transparency regarding the basis for Microsoft's claims and the potential commercial motivations behind the warning. Overall, the story provides valuable information but could improve by incorporating a broader range of sources and perspectives to enhance its credibility and impact.

RATING DETAILS

7
Accuracy

The article presents several factual claims that are generally aligned with available data, such as the existence of a new threat targeting Chrome users and Microsoft's warnings about it. However, the story does not provide independent verification of the malware's existence or its specific capabilities, such as the ability to extract and decrypt saved credentials from Chrome. The claim that Microsoft is using this warning as a means to promote its Edge browser could be seen as speculative without direct statements from Microsoft or corroborating evidence. While the article cites Microsoft's Incident Response team as the source, it lacks additional external validation from independent cybersecurity experts or organizations.

6
Balance

The article primarily presents Microsoft's perspective, focusing on their warning and recommendations. It briefly mentions Google's potential response but does not provide a detailed view from Google's side or any other independent cybersecurity experts. This creates a slight imbalance, as the story could benefit from a more comprehensive view of the situation, including Google's efforts to address the vulnerabilities and any third-party cybersecurity assessments. The narrative could be perceived as favoring Microsoft's position, especially in the context of promoting Edge over Chrome.

8
Clarity

The article is generally clear and well-structured, presenting the information in a logical sequence. The language is straightforward, making the technical aspects of the security threat accessible to a general audience. However, the article could improve clarity by providing more context on the technical details of the malware and the specific security measures recommended. The tone is neutral, but the narrative could benefit from a clearer distinction between factual reporting and speculative elements.

7
Source quality

The primary source of information is Microsoft's Incident Response team, which is a credible and authoritative source for cybersecurity threats. However, the story would be strengthened by including insights from other cybersecurity experts or organizations to provide a more rounded perspective. The reliance on a single source, particularly one with a vested interest in promoting its own browser, could affect the perceived impartiality of the report. Additional sources could help validate the claims and provide a more balanced view.

5
Transparency

The article does not clearly disclose the methodology behind the claims or the potential conflict of interest in Microsoft's dual role as a security advisor and a competitor to Chrome. While it mentions Microsoft's recommendation to switch to Edge, it does not provide detailed information on how these recommendations were formulated or the specific data supporting the claims about the malware's capabilities. Greater transparency about the basis for these claims and the potential impact of Microsoft's commercial interests would enhance the reader's understanding.

Sources

  1. https://thehackernews.com/2025/03/urgent-microsoft-patches-57-security.html
  2. https://www.ivanti.com/blog/march-2025-patch-tuesday
  3. https://www.thezdi.com/blog/2025/3/11/the-march-2025-security-update-review
  4. https://krebsonsecurity.com/2025/03/microsoft-6-zero-days-in-march-2025-patch-tuesday/
  5. https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security