Reverse-Engineering the KREMLIN Chrome Extension: Permission Abuse, DNR Rules, and Native Messaging
pr0h0•
A technical teardown of the KREMLIN banking trojan's malicious Chrome extension, examining how it abused extension permissions, manipulated declarativeNetRequest rules, and leveraged native messaging to infect over 1,500 systems, along with detection guidance for enterprises.
chrome-extensionsmalware-analysisbrowser-security