AI Summary

A banking malware operation that began in mid‑2025 uses the KREMLIN toolkit to install malicious Chrome and Edge extensions. The extensions harvest credentials, session tokens, and other sensitive data. Elastic Security Labs discovered that the malware bypasses Chromium’s integrity checks, causing the extensions to load in browsers as if the user had approved them.

AI summaries can be wrong sometimes—always verify important details using the source article.