The extension you never installed: KREMLIN forges Chrome's own integrity checks to steal banking sessions

The KREMLIN malware ecosystem, operated by Brazilian threat actors, stealthily installs malicious Chrome extensions by forging browser integrity checks, enabling large-scale theft of banking credentials and session tokens via a multi-stage infection chain and Ethereum-based C2 infrastructure.