SecurityBleepingComputerabout 5 hours ago
KREMLIN Malware Forces Malicious Browser Extensions
4 min read
A banking malware operation active since mid-2025 uses a toolkit named KREMLIN to force-install malicious Chrome and Edge extensions. Researchers at Elastic Security Labs found the malware bypasses Chromium's integrity checks to load extensions without user approval, stealing credentials and session tokens.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyGoogle
