{"id":7255,"date":"2026-09-16T12:16:17","date_gmt":"2026-09-16T12:16:17","guid":{"rendered":"https:\/\/windowsreport.com\/pt\/malware-bancario-kremlin-nao-tem-ligacao-com-a-russia-mas-esta-sequestrando-usuarios-brasileiros-do-chrome-e-edge-para-roubar-credenciais\/"},"modified":"2026-09-16T12:16:17","modified_gmt":"2026-09-16T12:16:17","slug":"malware-bancario-kremlin-nao-tem-ligacao-com-a-russia-mas-esta-sequestrando-usuarios-brasileiros-do-chrome-e-edge-para-roubar-credenciais","status":"publish","type":"post","link":"https:\/\/windowsreport.com\/pt\/malware-bancario-kremlin-nao-tem-ligacao-com-a-russia-mas-esta-sequestrando-usuarios-brasileiros-do-chrome-e-edge-para-roubar-credenciais\/","title":{"rendered":"Malware banc\u00e1rio KREMLIN n\u00e3o tem liga\u00e7\u00e3o com a R\u00fassia, mas est\u00e1 sequestrando usu\u00e1rios brasileiros do Chrome e Edge para roubar credenciais"},"content":{"rendered":"\n<p>Uma campanha de malware banc\u00e1rio rec\u00e9m-documentada est\u00e1 transformando o Google Chrome e o Microsoft Edge em ferramentas de roubo de credenciais. <a href=\"https:\/\/www.elastic.co\/security-labs\/threat-command\/malicious-browser-extension-kremlin-banking-malware\" target=\"_blank\" rel=\"noreferrer noopener\">O Elastic Security Labs est\u00e1 rastreando a opera\u00e7\u00e3o como REF9334<\/a>, com seu kit de ferramentas KREMLIN direcionado a usu\u00e1rios de servi\u00e7os banc\u00e1rios brasileiros por meio de extens\u00f5es de navegador maliciosas. S\u00f3 para deixar claro, o nome do malware n\u00e3o tem nenhuma rela\u00e7\u00e3o com a R\u00fassia. <\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-kremlin-secretly-installs-a-malicious-browser-extension\">KREMLIN instala secretamente uma extens\u00e3o de navegador maliciosa<\/h2>\n\n\n\n<p>De acordo com um relat\u00f3rio do <a href=\"https:\/\/thehackernews.com\/2026\/09\/kremlin-banking-malware-hijacks-chrome.html\" target=\"_blank\" rel=\"noreferrer noopener\">The Hacker News<\/a>, a campanha estaria ativa desde pelo menos maio de 2025, usando documentos falsos e iscas que se passam por cerca de uma d\u00fazia de bancos brasileiros. As v\u00edtimas s\u00e3o levadas a executar manualmente um arquivo JavaScript, o que inicia uma cadeia de infec\u00e7\u00e3o em v\u00e1rias etapas antes de, por fim, instalar a extens\u00e3o maliciosa. <\/p>\n\n\n\n<p>O que torna o KREMLIN particularmente preocupante \u00e9 a forma como ele insere a extens\u00e3o em navegadores baseados no Chromium. O malware modifica o arquivo Secure Preferences do Chrome e regenera as verifica\u00e7\u00f5es de integridade usadas para detectar altera\u00e7\u00f5es n\u00e3o autorizadas, fazendo com que a extens\u00e3o pare\u00e7a ter sido instalada de forma leg\u00edtima. <\/p>\n\n\n\n<p>A extens\u00e3o supostamente se passa por <strong>\u201cAVSync System Inc.\u201d<\/strong> e pode acessar abas do navegador, cookies e o armazenamento local. A Elastic afirma que ela pode fazer capturas de tela, enumerar abas abertas, extrair HTML e roubar dados do navegador relacionados \u00e0 sess\u00e3o, potencialmente dando aos invasores acesso a informa\u00e7\u00f5es que podem ser \u00fateis para assumir o controle de contas. <\/p>\n\n\n\n<p>A opera\u00e7\u00e3o tamb\u00e9m usa contratos inteligentes da Ethereum como resolvedores de dead drop, permitindo que os invasores recuperem dinamicamente endere\u00e7os de infraestrutura e locais de payload sem codificar tudo diretamente no malware. A Elastic afirma que essa abordagem baseada em blockchain foi introduzida durante a evolu\u00e7\u00e3o da campanha em 2026.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-1-515-infected-systems-were-identified\">1.515 sistemas infectados foram identificados<\/h2>\n\n\n\n<p>A Elastic registrou um dos dom\u00ednios de rede do tipo can\u00e1rio da campanha e observou 1.515 sistemas infectados tentando acess\u00e1-lo. Mais de 98% estavam localizados no Brasil, embora esse n\u00famero n\u00e3o deva ser interpretado como o total de v\u00edtimas, pois reflete os sistemas observados por meio dessa telemetria espec\u00edfica. <\/p>\n\n\n\n<p>Segundo relatos, a campanha passou por sete campanhas distintas, evoluindo da distribui\u00e7\u00e3o de RATs comuns para uma opera\u00e7\u00e3o mais sofisticada de roubo de credenciais focada no navegador. Tudo indica que os invasores continuam adaptando sua infraestrutura e t\u00e9cnicas de evas\u00e3o.<\/p>\n\n\n\n<p>Para usu\u00e1rios do Chrome e do Edge, o caso \u00e9 mais um lembrete de que extens\u00f5es maliciosas nem sempre exigem que a v\u00edtima instale conscientemente algo a partir de uma loja de extens\u00f5es oficial. <\/p>\n","protected":false},"excerpt":{"rendered":"<p>Uma campanha de malware banc\u00e1rio rec\u00e9m-documentada est\u00e1 transformando o Google Chrome e o Microsoft Edge em ferramentas de roubo de credenciais. O Elastic Security Labs est\u00e1 rastreando a opera\u00e7\u00e3o como REF9334, com seu kit de ferramentas KREMLIN direcionado a usu\u00e1rios de servi\u00e7os banc\u00e1rios brasileiros por meio de extens\u00f5es de navegador maliciosas. S\u00f3 para deixar claro, [&hellip;]<\/p>\n","protected":false},"author":2314,"featured_media":7256,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_enabled_clarity":"","footnotes":""},"categories":[55],"tags":[],"work":[],"class_list":["post-7255","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tutoriais"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v28.3 (Yoast SEO v28.3) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Malware banc\u00e1rio KREMLIN n\u00e3o tem liga\u00e7\u00e3o com a R\u00fassia, mas est\u00e1 sequestrando usu\u00e1rios brasileiros do Chrome e Edge para roubar credenciais<\/title>\n<meta name=\"description\" content=\"O malware KREMLIN n\u00e3o tem liga\u00e7\u00e3o com a R\u00fassia e tem como alvo usu\u00e1rios brasileiros do Chrome e Edge com extens\u00f5es maliciosas que roubam credenciais, cookies e tokens de sess\u00e3o.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/windowsreport.com\/pt\/malware-bancario-kremlin-nao-tem-ligacao-com-a-russia-mas-esta-sequestrando-usuarios-brasileiros-do-chrome-e-edge-para-roubar-credenciais\/\" \/>\n<meta property=\"og:locale\" content=\"pt_PT\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Malware banc\u00e1rio KREMLIN n\u00e3o tem liga\u00e7\u00e3o com a R\u00fassia, mas est\u00e1 sequestrando usu\u00e1rios brasileiros do Chrome e Edge para roubar credenciais\" \/>\n<meta property=\"og:description\" content=\"O malware KREMLIN n\u00e3o tem liga\u00e7\u00e3o com a R\u00fassia e tem como alvo usu\u00e1rios brasileiros do Chrome e Edge com extens\u00f5es maliciosas que roubam credenciais, cookies e tokens de sess\u00e3o.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/windowsreport.com\/pt\/malware-bancario-kremlin-nao-tem-ligacao-com-a-russia-mas-esta-sequestrando-usuarios-brasileiros-do-chrome-e-edge-para-roubar-credenciais\/\" \/>\n<meta property=\"og:site_name\" content=\"WindowsReport PT (Portuguese)\" \/>\n<meta property=\"article:published_time\" content=\"2026-09-16T12:16:17+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/windowsreport.com\/pt\/wp-content\/uploads\/sites\/2\/2026\/09\/Cybersecurity-Microsoft-Azure-Domain-Fronting.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1024\" \/>\n\t<meta property=\"og:image:height\" content=\"768\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Rishaj Upadhyay\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@rishaj_u\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"Rishaj Upadhyay\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tempo estimado de leitura\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/pt\\\/malware-bancario-kremlin-nao-tem-ligacao-com-a-russia-mas-esta-sequestrando-usuarios-brasileiros-do-chrome-e-edge-para-roubar-credenciais\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/pt\\\/malware-bancario-kremlin-nao-tem-ligacao-com-a-russia-mas-esta-sequestrando-usuarios-brasileiros-do-chrome-e-edge-para-roubar-credenciais\\\/\"},\"author\":{\"name\":\"Rishaj Upadhyay\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/pt\\\/#\\\/schema\\\/person\\\/04aa559bdd859ef09ab42a04246aec23\"},\"headline\":\"Malware banc\u00e1rio KREMLIN n\u00e3o tem liga\u00e7\u00e3o com a R\u00fassia, mas est\u00e1 sequestrando usu\u00e1rios brasileiros do Chrome e Edge para roubar credenciais\",\"datePublished\":\"2026-09-16T12:16:17+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/pt\\\/malware-bancario-kremlin-nao-tem-ligacao-com-a-russia-mas-esta-sequestrando-usuarios-brasileiros-do-chrome-e-edge-para-roubar-credenciais\\\/\"},\"wordCount\":493,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/pt\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/pt\\\/malware-bancario-kremlin-nao-tem-ligacao-com-a-russia-mas-esta-sequestrando-usuarios-brasileiros-do-chrome-e-edge-para-roubar-credenciais\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/windowsreport.com\\\/pt\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2026\\\/09\\\/Cybersecurity-Microsoft-Azure-Domain-Fronting.jpg\",\"articleSection\":[\"Tutoriais\"],\"inLanguage\":\"pt-PT\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/windowsreport.com\\\/pt\\\/malware-bancario-kremlin-nao-tem-ligacao-com-a-russia-mas-esta-sequestrando-usuarios-brasileiros-do-chrome-e-edge-para-roubar-credenciais\\\/#respond\"]}],\"copyrightYear\":\"2026\",\"copyrightHolder\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/pt\\\/malware-bancario-kremlin-nao-tem-ligacao-com-a-russia-mas-esta-sequestrando-usuarios-brasileiros-do-chrome-e-edge-para-roubar-credenciais\\\/\",\"url\":\"https:\\\/\\\/windowsreport.com\\\/pt\\\/malware-bancario-kremlin-nao-tem-ligacao-com-a-russia-mas-esta-sequestrando-usuarios-brasileiros-do-chrome-e-edge-para-roubar-credenciais\\\/\",\"name\":\"Malware banc\u00e1rio KREMLIN n\u00e3o tem liga\u00e7\u00e3o com a R\u00fassia, mas est\u00e1 sequestrando usu\u00e1rios brasileiros do Chrome e Edge para roubar credenciais\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/pt\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/pt\\\/malware-bancario-kremlin-nao-tem-ligacao-com-a-russia-mas-esta-sequestrando-usuarios-brasileiros-do-chrome-e-edge-para-roubar-credenciais\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/pt\\\/malware-bancario-kremlin-nao-tem-ligacao-com-a-russia-mas-esta-sequestrando-usuarios-brasileiros-do-chrome-e-edge-para-roubar-credenciais\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/windowsreport.com\\\/pt\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2026\\\/09\\\/Cybersecurity-Microsoft-Azure-Domain-Fronting.jpg\",\"datePublished\":\"2026-09-16T12:16:17+00:00\",\"description\":\"O malware KREMLIN n\u00e3o tem liga\u00e7\u00e3o com a R\u00fassia e tem como alvo usu\u00e1rios brasileiros do Chrome e Edge com extens\u00f5es maliciosas que roubam credenciais, cookies e tokens de sess\u00e3o.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/pt\\\/malware-bancario-kremlin-nao-tem-ligacao-com-a-russia-mas-esta-sequestrando-usuarios-brasileiros-do-chrome-e-edge-para-roubar-credenciais\\\/#breadcrumb\"},\"inLanguage\":\"pt-PT\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/windowsreport.com\\\/pt\\\/malware-bancario-kremlin-nao-tem-ligacao-com-a-russia-mas-esta-sequestrando-usuarios-brasileiros-do-chrome-e-edge-para-roubar-credenciais\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-PT\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/pt\\\/malware-bancario-kremlin-nao-tem-ligacao-com-a-russia-mas-esta-sequestrando-usuarios-brasileiros-do-chrome-e-edge-para-roubar-credenciais\\\/#primaryimage\",\"url\":\"https:\\\/\\\/windowsreport.com\\\/pt\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2026\\\/09\\\/Cybersecurity-Microsoft-Azure-Domain-Fronting.jpg\",\"contentUrl\":\"https:\\\/\\\/windowsreport.com\\\/pt\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2026\\\/09\\\/Cybersecurity-Microsoft-Azure-Domain-Fronting.jpg\",\"width\":1024,\"height\":768},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/pt\\\/malware-bancario-kremlin-nao-tem-ligacao-com-a-russia-mas-esta-sequestrando-usuarios-brasileiros-do-chrome-e-edge-para-roubar-credenciais\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/windowsreport.com\\\/pt\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Malware banc\u00e1rio KREMLIN n\u00e3o tem liga\u00e7\u00e3o com a R\u00fassia, mas est\u00e1 sequestrando usu\u00e1rios brasileiros do Chrome e Edge para roubar credenciais\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/pt\\\/#website\",\"url\":\"https:\\\/\\\/windowsreport.com\\\/pt\\\/\",\"name\":\"WindowsReport PT (Portuguese)\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/pt\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/windowsreport.com\\\/pt\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"pt-PT\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/pt\\\/#organization\",\"name\":\"WindowsReport PT (Portuguese)\",\"url\":\"https:\\\/\\\/windowsreport.com\\\/pt\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-PT\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/pt\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/windowsreport.com\\\/pt\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2024\\\/01\\\/wr-logo-default-1.png\",\"contentUrl\":\"https:\\\/\\\/windowsreport.com\\\/pt\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2024\\\/01\\\/wr-logo-default-1.png\",\"width\":214,\"height\":35,\"caption\":\"WindowsReport PT (Portuguese)\"},\"image\":{\"@id\":\"https:\\\/\\\/windowsreport.com\\\/pt\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/windowsreport.com\\\/pt\\\/#\\\/schema\\\/person\\\/04aa559bdd859ef09ab42a04246aec23\",\"name\":\"Rishaj Upadhyay\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-PT\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/72656c3b764a0c8360c5538719a301a35e27fc67b8f00804a6554d06824411b2?s=96&d=https%3A%2F%2Fwindowsreport.com%2Fwp-content%2Fuploads%2Fsites%2F2%2F2024%2F01%2Fwricon.png&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/72656c3b764a0c8360c5538719a301a35e27fc67b8f00804a6554d06824411b2?s=96&d=https%3A%2F%2Fwindowsreport.com%2Fwp-content%2Fuploads%2Fsites%2F2%2F2024%2F01%2Fwricon.png&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/72656c3b764a0c8360c5538719a301a35e27fc67b8f00804a6554d06824411b2?s=96&d=https%3A%2F%2Fwindowsreport.com%2Fwp-content%2Fuploads%2Fsites%2F2%2F2024%2F01%2Fwricon.png&r=g\",\"caption\":\"Rishaj Upadhyay\"},\"description\":\"Rishaj is a tech writer who has been writing professionally for over four years, with a passion for Android, Windows, and all things tech. He initially joined Windows Report as a tech journalist and is now taking over as a news editor. When he's not breaking the keyboard, you can find him cooking, or listening to music\\\/podcasts.\",\"sameAs\":[\"https:\\\/\\\/x.com\\\/rishaj_u\"],\"url\":\"https:\\\/\\\/windowsreport.com\\\/pt\\\/author\\\/rishaj\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Malware banc\u00e1rio KREMLIN n\u00e3o tem liga\u00e7\u00e3o com a R\u00fassia, mas est\u00e1 sequestrando usu\u00e1rios brasileiros do Chrome e Edge para roubar credenciais","description":"O malware KREMLIN n\u00e3o tem liga\u00e7\u00e3o com a R\u00fassia e tem como alvo usu\u00e1rios brasileiros do Chrome e Edge com extens\u00f5es maliciosas que roubam credenciais, cookies e tokens de sess\u00e3o.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/windowsreport.com\/pt\/malware-bancario-kremlin-nao-tem-ligacao-com-a-russia-mas-esta-sequestrando-usuarios-brasileiros-do-chrome-e-edge-para-roubar-credenciais\/","og_locale":"pt_PT","og_type":"article","og_title":"Malware banc\u00e1rio KREMLIN n\u00e3o tem liga\u00e7\u00e3o com a R\u00fassia, mas est\u00e1 sequestrando usu\u00e1rios brasileiros do Chrome e Edge para roubar credenciais","og_description":"O malware KREMLIN n\u00e3o tem liga\u00e7\u00e3o com a R\u00fassia e tem como alvo usu\u00e1rios brasileiros do Chrome e Edge com extens\u00f5es maliciosas que roubam credenciais, cookies e tokens de sess\u00e3o.","og_url":"https:\/\/windowsreport.com\/pt\/malware-bancario-kremlin-nao-tem-ligacao-com-a-russia-mas-esta-sequestrando-usuarios-brasileiros-do-chrome-e-edge-para-roubar-credenciais\/","og_site_name":"WindowsReport PT (Portuguese)","article_published_time":"2026-09-16T12:16:17+00:00","og_image":[{"width":1024,"height":768,"url":"https:\/\/windowsreport.com\/pt\/wp-content\/uploads\/sites\/2\/2026\/09\/Cybersecurity-Microsoft-Azure-Domain-Fronting.jpg","type":"image\/jpeg"}],"author":"Rishaj Upadhyay","twitter_card":"summary_large_image","twitter_creator":"@rishaj_u","twitter_misc":{"Escrito por":"Rishaj Upadhyay","Tempo estimado de leitura":"2 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/windowsreport.com\/pt\/malware-bancario-kremlin-nao-tem-ligacao-com-a-russia-mas-esta-sequestrando-usuarios-brasileiros-do-chrome-e-edge-para-roubar-credenciais\/#article","isPartOf":{"@id":"https:\/\/windowsreport.com\/pt\/malware-bancario-kremlin-nao-tem-ligacao-com-a-russia-mas-esta-sequestrando-usuarios-brasileiros-do-chrome-e-edge-para-roubar-credenciais\/"},"author":{"name":"Rishaj Upadhyay","@id":"https:\/\/windowsreport.com\/pt\/#\/schema\/person\/04aa559bdd859ef09ab42a04246aec23"},"headline":"Malware banc\u00e1rio KREMLIN n\u00e3o tem liga\u00e7\u00e3o com a R\u00fassia, mas est\u00e1 sequestrando usu\u00e1rios brasileiros do Chrome e Edge para roubar credenciais","datePublished":"2026-09-16T12:16:17+00:00","mainEntityOfPage":{"@id":"https:\/\/windowsreport.com\/pt\/malware-bancario-kremlin-nao-tem-ligacao-com-a-russia-mas-esta-sequestrando-usuarios-brasileiros-do-chrome-e-edge-para-roubar-credenciais\/"},"wordCount":493,"commentCount":0,"publisher":{"@id":"https:\/\/windowsreport.com\/pt\/#organization"},"image":{"@id":"https:\/\/windowsreport.com\/pt\/malware-bancario-kremlin-nao-tem-ligacao-com-a-russia-mas-esta-sequestrando-usuarios-brasileiros-do-chrome-e-edge-para-roubar-credenciais\/#primaryimage"},"thumbnailUrl":"https:\/\/windowsreport.com\/pt\/wp-content\/uploads\/sites\/2\/2026\/09\/Cybersecurity-Microsoft-Azure-Domain-Fronting.jpg","articleSection":["Tutoriais"],"inLanguage":"pt-PT","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/windowsreport.com\/pt\/malware-bancario-kremlin-nao-tem-ligacao-com-a-russia-mas-esta-sequestrando-usuarios-brasileiros-do-chrome-e-edge-para-roubar-credenciais\/#respond"]}],"copyrightYear":"2026","copyrightHolder":{"@id":"https:\/\/windowsreport.com\/#organization"}},{"@type":"WebPage","@id":"https:\/\/windowsreport.com\/pt\/malware-bancario-kremlin-nao-tem-ligacao-com-a-russia-mas-esta-sequestrando-usuarios-brasileiros-do-chrome-e-edge-para-roubar-credenciais\/","url":"https:\/\/windowsreport.com\/pt\/malware-bancario-kremlin-nao-tem-ligacao-com-a-russia-mas-esta-sequestrando-usuarios-brasileiros-do-chrome-e-edge-para-roubar-credenciais\/","name":"Malware banc\u00e1rio KREMLIN n\u00e3o tem liga\u00e7\u00e3o com a R\u00fassia, mas est\u00e1 sequestrando usu\u00e1rios brasileiros do Chrome e Edge para roubar credenciais","isPartOf":{"@id":"https:\/\/windowsreport.com\/pt\/#website"},"primaryImageOfPage":{"@id":"https:\/\/windowsreport.com\/pt\/malware-bancario-kremlin-nao-tem-ligacao-com-a-russia-mas-esta-sequestrando-usuarios-brasileiros-do-chrome-e-edge-para-roubar-credenciais\/#primaryimage"},"image":{"@id":"https:\/\/windowsreport.com\/pt\/malware-bancario-kremlin-nao-tem-ligacao-com-a-russia-mas-esta-sequestrando-usuarios-brasileiros-do-chrome-e-edge-para-roubar-credenciais\/#primaryimage"},"thumbnailUrl":"https:\/\/windowsreport.com\/pt\/wp-content\/uploads\/sites\/2\/2026\/09\/Cybersecurity-Microsoft-Azure-Domain-Fronting.jpg","datePublished":"2026-09-16T12:16:17+00:00","description":"O malware KREMLIN n\u00e3o tem liga\u00e7\u00e3o com a R\u00fassia e tem como alvo usu\u00e1rios brasileiros do Chrome e Edge com extens\u00f5es maliciosas que roubam credenciais, cookies e tokens de sess\u00e3o.","breadcrumb":{"@id":"https:\/\/windowsreport.com\/pt\/malware-bancario-kremlin-nao-tem-ligacao-com-a-russia-mas-esta-sequestrando-usuarios-brasileiros-do-chrome-e-edge-para-roubar-credenciais\/#breadcrumb"},"inLanguage":"pt-PT","potentialAction":[{"@type":"ReadAction","target":["https:\/\/windowsreport.com\/pt\/malware-bancario-kremlin-nao-tem-ligacao-com-a-russia-mas-esta-sequestrando-usuarios-brasileiros-do-chrome-e-edge-para-roubar-credenciais\/"]}]},{"@type":"ImageObject","inLanguage":"pt-PT","@id":"https:\/\/windowsreport.com\/pt\/malware-bancario-kremlin-nao-tem-ligacao-com-a-russia-mas-esta-sequestrando-usuarios-brasileiros-do-chrome-e-edge-para-roubar-credenciais\/#primaryimage","url":"https:\/\/windowsreport.com\/pt\/wp-content\/uploads\/sites\/2\/2026\/09\/Cybersecurity-Microsoft-Azure-Domain-Fronting.jpg","contentUrl":"https:\/\/windowsreport.com\/pt\/wp-content\/uploads\/sites\/2\/2026\/09\/Cybersecurity-Microsoft-Azure-Domain-Fronting.jpg","width":1024,"height":768},{"@type":"BreadcrumbList","@id":"https:\/\/windowsreport.com\/pt\/malware-bancario-kremlin-nao-tem-ligacao-com-a-russia-mas-esta-sequestrando-usuarios-brasileiros-do-chrome-e-edge-para-roubar-credenciais\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/windowsreport.com\/pt\/"},{"@type":"ListItem","position":2,"name":"Malware banc\u00e1rio KREMLIN n\u00e3o tem liga\u00e7\u00e3o com a R\u00fassia, mas est\u00e1 sequestrando usu\u00e1rios brasileiros do Chrome e Edge para roubar credenciais"}]},{"@type":"WebSite","@id":"https:\/\/windowsreport.com\/pt\/#website","url":"https:\/\/windowsreport.com\/pt\/","name":"WindowsReport PT (Portuguese)","description":"","publisher":{"@id":"https:\/\/windowsreport.com\/pt\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/windowsreport.com\/pt\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"pt-PT"},{"@type":"Organization","@id":"https:\/\/windowsreport.com\/pt\/#organization","name":"WindowsReport PT (Portuguese)","url":"https:\/\/windowsreport.com\/pt\/","logo":{"@type":"ImageObject","inLanguage":"pt-PT","@id":"https:\/\/windowsreport.com\/pt\/#\/schema\/logo\/image\/","url":"https:\/\/windowsreport.com\/pt\/wp-content\/uploads\/sites\/2\/2024\/01\/wr-logo-default-1.png","contentUrl":"https:\/\/windowsreport.com\/pt\/wp-content\/uploads\/sites\/2\/2024\/01\/wr-logo-default-1.png","width":214,"height":35,"caption":"WindowsReport PT (Portuguese)"},"image":{"@id":"https:\/\/windowsreport.com\/pt\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/windowsreport.com\/pt\/#\/schema\/person\/04aa559bdd859ef09ab42a04246aec23","name":"Rishaj Upadhyay","image":{"@type":"ImageObject","inLanguage":"pt-PT","@id":"https:\/\/secure.gravatar.com\/avatar\/72656c3b764a0c8360c5538719a301a35e27fc67b8f00804a6554d06824411b2?s=96&d=https%3A%2F%2Fwindowsreport.com%2Fwp-content%2Fuploads%2Fsites%2F2%2F2024%2F01%2Fwricon.png&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/72656c3b764a0c8360c5538719a301a35e27fc67b8f00804a6554d06824411b2?s=96&d=https%3A%2F%2Fwindowsreport.com%2Fwp-content%2Fuploads%2Fsites%2F2%2F2024%2F01%2Fwricon.png&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/72656c3b764a0c8360c5538719a301a35e27fc67b8f00804a6554d06824411b2?s=96&d=https%3A%2F%2Fwindowsreport.com%2Fwp-content%2Fuploads%2Fsites%2F2%2F2024%2F01%2Fwricon.png&r=g","caption":"Rishaj Upadhyay"},"description":"Rishaj is a tech writer who has been writing professionally for over four years, with a passion for Android, Windows, and all things tech. He initially joined Windows Report as a tech journalist and is now taking over as a news editor. When he's not breaking the keyboard, you can find him cooking, or listening to music\/podcasts.","sameAs":["https:\/\/x.com\/rishaj_u"],"url":"https:\/\/windowsreport.com\/pt\/author\/rishaj\/"}]}},"_links":{"self":[{"href":"https:\/\/windowsreport.com\/pt\/wp-json\/wp\/v2\/posts\/7255","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/windowsreport.com\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/windowsreport.com\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/windowsreport.com\/pt\/wp-json\/wp\/v2\/users\/2314"}],"replies":[{"embeddable":true,"href":"https:\/\/windowsreport.com\/pt\/wp-json\/wp\/v2\/comments?post=7255"}],"version-history":[{"count":0,"href":"https:\/\/windowsreport.com\/pt\/wp-json\/wp\/v2\/posts\/7255\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/windowsreport.com\/pt\/wp-json\/wp\/v2\/media\/7256"}],"wp:attachment":[{"href":"https:\/\/windowsreport.com\/pt\/wp-json\/wp\/v2\/media?parent=7255"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/windowsreport.com\/pt\/wp-json\/wp\/v2\/categories?post=7255"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/windowsreport.com\/pt\/wp-json\/wp\/v2\/tags?post=7255"},{"taxonomy":"work","embeddable":true,"href":"https:\/\/windowsreport.com\/pt\/wp-json\/wp\/v2\/work?post=7255"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}