Hackers Force-Installing Chrome Extensions That Steal Bank Passwords and Login Sessions: Report
6 Articles
6 Articles
The Daily Hodl
Cryptocurrency News | Cryptocurrency Prices | Market CapHackers Force-Installing Chrome Extensions That Steal Bank Passwords and Login Sessions: Report
KREMLIN banking malware silently force-installs malicious Chrome and Edge extensions that steal credentials and session data without user approval. Elastic Security Labs ties the Brazilian-linked toolkit to seven campaigns since May 2025 and disrupted more than 1,500 infections.
A new banking malware, called "Kremlin," uses fake Chrome and Edge extensions to steal passwords, cookies and session data. So far, more than 1,500 systems have been infected.
New Malware Can Silently Install Browser Extensions Without Your Permission
A new malware has appeared, and it actually bypasses browser checks and force installs Chrome and Edge extensions. The malware in question is called ‘KREMLIN’, and it has been active since mid-2025. New malware has appeared, and it can install Chrome & Edge browser extensions without your permission Researchers at Elastic Security Labs found that the malicious extensions are able to bypass Chromium’s integrity mechanisms. When they do that, they…
KREMLIN malware recreates Chromium cryptographic hash to install spy extensions on Chrome and Edge without permission. See how the threat works in Brazil.
Coverage Details
Bias Distribution
- 50% of the sources are Center, 50% of the sources lean Right
Factuality
To view factuality data please Upgrade to Premium
