Plan
active
KREMLIN Banking Malware Hijacks Chrome/Edge for Credential Theft
- Engineer — Learn: No KEV listing, PoC, or high EPSS signal; the malicious extension technique targeting Chrome/Edge is worth understanding for browser security posture, but no patch or configuration action is required today.
- SOC/IR — Plan: Build or tune detections for malicious browser extension installation behavior (unexpected extension loads, suspicious Chrome/Edge profile modifications); search Elastic Security Labs REF9334 reporting for any published IOCs or YARA rules to operationalize this quarter.
- Leader — Skip
This entry was curated and judged by AI (Claude) with automated enrichment
(CISA KEV / EPSS / public PoC). Verify against the original source before
acting. Found a bad verdict?
Report it —
confirmed errors go to the corrections log.