Elastic 安全实验室
The Extension You Never Installed: KREMLIN Forges Chrome's Own Integrity Checks to Steal Banking Sessions
Elastic Security Labs tracked this malicious browser extension across seven campaigns and 15 months, using Brazilian bank lures and Ethereum smart contracts that store its C2 configuration.