Malware bypasses browser checks to force install Chrome, Edge extensions

A banking malware operation active since mid-2025 uses a toolkit named KREMLIN to bypass browser checks and force-install malicious Chrome and Edge extensions. These extensions steal credentials, session tokens, and sensitive data, according to researchers. The campaign highlights evolving malware tactics targeting browser security.