CuraSec

tag: Banking-Malware · 2 items

Plan archived KREMLIN Banking Malware Hijacks Chrome/Edge for Credential Theft
2026-09-16 · The Hacker News · source ↗ #banking-malware#browser-extension#credential-theft
  • Engineer — Learn: No KEV listing, PoC, or high EPSS signal; the malicious extension technique targeting Chrome/Edge is worth understanding for browser security posture, but no patch or configuration action is required today.
  • SOC/IR — Plan: Build or tune detections for malicious browser extension installation behavior (unexpected extension loads, suspicious Chrome/Edge profile modifications); search Elastic Security Labs REF9334 reporting for any published IOCs or YARA rules to operationalize this quarter.
  • Leader — Skip
Learn archived ToxicPanda Android malware expands targets, abuses VPN to block Play Store
2026-08-24 · BleepingComputer · source ↗ #android-malware#mobile-security#banking-malware
  • Engineer — Skip
  • SOC/IR — Learn: The VPN-permission-as-blocker technique is a noteworthy evasion TTP for mobile threat awareness, but the summary provides no IOCs or detection signatures to act on; file for context when tuning mobile EDR or MAM policies.
  • Leader — Skip