The Grandoreiro banking malware uses remote overlay and a fake Chrome browser plugin to steal from banking customers.
Source: Threadpost