New KREMLIN Malware Installs Chrome Extensions Users Never Approved to Steal Banking Data

Security researchers have uncovered a Brazilian banking-malware operation named KREMLIN that secretly installs malicious extensions in Google Chrome and Microsoft Edge. The malware bypasses Chromium’s built-in extension integrity protections, making the browser load the extension as if the victim had installed and approved it. Elastic Security...