Banking malware KREMLIN bypasses browser checks to force-install malicious extensions

An active banking malware operation named KREMLIN bypasses browser security checks to forcefully install malicious Chrome and Edge extensions. These add-ons are designed to harvest credentials, session tokens, and sensitive user data from infected workstations.