Malware bypasses browser checks to force install Chrome, Edge extensions
Teaser from the source
A banking malware operation active since mid-2025 has been using a toolkit named KREMLIN to install malicious Chrome and Edge extensions that steal credentials, session tokens, and sensitive data. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerMore on extensions
Other advisories
- MediumCVE-2026-113603X402-foundation @x402/extensions: Umgehung der Autorisierung über nutzergesteuerten Schlüssel
- MediumCVE-2026-113603X402-foundation @x402/extensions: Umgehung der Autorisierung über nutzergesteuerten Schlüssel
- MediumCVE-2026-112064TYPO3 Extensions: Mehrere Schwachstellen
- Not ratedosv:CVE-2026-111046FOSSBilling: Low-privileged staff can read and modify configuration of deactivated extensions
- Not ratedosv:CVE-2026-112044dotnet eShop Catalog API Extensions.cs AddApplicationServices improper authentication
- Not ratedosv:CVE-2026-98490net: openvswitch: conntrack: fix helper UAF due to extensions realloc
- Not ratedosv:CVE-2026-98442net/sched: act_ct: fix helper UAF due to extensions realloc
- CriticalCVE-2026-103768ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: uneingeschränkter Dateiupload
Other news entries
- TYPO3 Extensions: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- 16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets to Steal Recovery PhrasesNewsThe Hacker News
- The EDR blind spot: 3 ways browser attacks evade endpoint telemetryNewsBleepingComputer
- MediaWiki Extensions: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- MediaWiki Extensions: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- BragJack attacks hijack AI browser agents through malicious extensionsNewsBleepingComputer
- Microsoft Teams will let admins block custom file extensionsNewsBleepingComputer
- TYPO3 Extensions: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
ID