Chrome and Edge browsers hijacked by KREMLIN malware for credential and token session theft

Elastic Security Labs uncovered REF9334, a Brazilian banking malware campaign active since May 2025 Malware “Kremlin” deploys fake docs and malicious Chrome/Edge extensions to steal banking data 1,515 infections found, 98% in Brazil…