CTI · corroborated · 2026-09-16
KREMLIN Banking Malware Installs Chrome Extensions Users Never Approved to Steal Banking Data
Actors
KREMLIN (REF9334)
Malware / tools
KREMLIN banking malware
Campaigns
—
CVEs
—
Victim sectors
finance
Geography
Brazil
MITRE ATT&CK
Indicators
No curated indicators tied to this case.
Detections
No detection content yet — case analysis did not yield signal-specific telemetry. Check back after the next daily CTI pass.