Malware bypasses browser checks to force install Chrome, Edge extensions
Elastic Security Labs detailed KREMLIN, a Brazilian banking malware that silently installs malicious Chrome and Edge extensions, with 1,515 confirmed infections.
62
Malware
KREMLIN
- Mentions · 7d0
- Mentions · 30d0
- All mentions2
- First seenSep 16, 2026
- Last mentionedSep 16, 2026
Timeline
2 articles · newest firstKREMLIN Banking Malware Infects Over 1,500 Systems With Malicious Chrome Extension
Elastic tracks KREMLIN banking malware that used fake Brazilian bank JavaScript lures to deploy malicious Chrome and Edge extensions on 1,515 systems.
52
Appears with
- Google Chromeproduct · 2
- Microsoft Edgeproduct · 2
- Elastic Security Labsvendor · 1
- Googlevendor · 1
- AVSyncproduct · 1
- Internet Archiveorganization · 1
- Elasticvendor · 1
- Elasticorganization · 1
- REMCOSmalware · 1
- Pulsar RATmalware · 1
- Microsoftvendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.