~/article/malware-bypasses-browser-checks-to-force-install-chrome-edge-extensions-3ymoma

info2026-09-16 18:50 UTCSource: BleepingComputer

Malware bypasses browser checks to force install Chrome, Edge extensions

A banking malware operation active since mid-2025 has been using a toolkit named KREMLIN to install malicious Chrome and Edge extensions that steal credentials, session tokens, and sensitive data.

Read at the source

Summary written for cymesh.dev. The full article lives at BleepingComputer.

Topics

malware

~/cymesh.net

Certificates expire quietly

cymesh.net watches your TLS and SSL certificates and warns you before one lapses.

monitorsTLS/SSL expiry, chain and hostnamealertsemail, ahead of the expiry datescopenon-intrusive, read-only checks

Talk to us See cymesh.net

~/related/malware-bypasses-browser-checks-to-force-install-chrome-edge-extensions-3ymoma

2026-09-18 15:24 UTC[info]

Transparent Tribe Deploys New Rust Backdoor Using Private GitHub Repositories for C2

The Hacker Newsmalware apt

2026-09-18 15:19 UTC[info]

Fake LastPass Authenticator GitHub repos push new Rapuncel infostealer

BleepingComputermalware

2026-09-18 14:25 UTC[high]

In Other News: Ransomware Developer Sentenced, Plugin4Shell AI Attack, Critical SAP Flaw

SecurityWeekransomware ai malware

2026-09-18 10:40 UTC[info]

WeaselBiscuit Stealer Spreads via 13 npm Packages to Harvest Chrome Extension Storage

The Hacker Newssupply-chain malware

2026-09-18 09:46 UTC[info]

Brevo Supply Chain Attack Injects Malware Into 100,000 Websites

SecurityWeeksupply-chain cloud malware

2026-09-18 09:18 UTC[info]

Claimed Bug Bounty Hunter Likely Used LLM to Build PhantomRaven npm Stealer

The Hacker Newssupply-chain ai malware