Curated Cyber Threat Intelligence

Threat Feed

Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.

scheduleUpdated 2026-10-28 · 04:17 UTC
articleTotal: 1890 reports

Filtered Reports

2 / 2 results
Active filter:tag: #kremlin✕ clear
KREMLIN malware force-installs malicious Chrome/Edge extensions via bypasshighbug_reportVulnerability
bug_reportVulnerability

KREMLIN malware force-installs malicious Chrome/Edge extensions via bypass

Google Chrome and Microsoft Edge browsers on Windows systems. Active campaign since May 2025 with 1,515+ confirmed infections, primarily in Brazil. Affects users who execute malicious JavaScript files disguised as business documents.

Google Chrome16 Sep · 16:50 UTC
REF9334 Deploys KREMLIN Malware Targeting Brazilian Financial Sectorhighperson_alertThreat Actor
person_alertThreat Actor

REF9334 Deploys KREMLIN Malware Targeting Brazilian Financial Sector

REF9334 is a Brazilian threat actor tracked by Elastic Security Labs, active since at least May 2025. The actor specializes in banking fraud operations targeting Brazilian financial institutions through sophisticated malware delivery campaigns.

Google15 Sep · 16:54 UTC