BANKING MALWARE FORCES MALICIOUS EXTENSIONS

The KREMLIN toolkit circumvents standard browser installation protections to inject extensions without user consent. Once installed, the malicious extensions steal banking credentials, session tokens, and other sensitive data from infected systems. The operation specifically targets Chrome and Microsoft Edge, two of the most widely-used browsers globally. The malware's ability to bypass browser-level security measures suggests sophisticated engineering designed to evade both user detection and security software. Affected users may experience unauthorized access to financial accounts and compromised login sessions. The threat underscores the importance of keeping browsers updated and avoiding suspicious downloads. Security researchers are tracking the operation and working with browser vendors on detection methods. Users should monitor browser extensions for unfamiliar additions and consider using security tools that monitor unauthorized installations.