malware or rootkit that inject html in the browser..

Hello, anyone know a malware or rootkit that inject html in the browser ?
It should inject html in the victim browser to make a sort of phishing on specific website.
Or something that exfiltrate https encryption key. In this way the attacker having hacked the router and having the encryptions key it could make mitm attack for phishing or just spying the user with a very low fingerprint.

EDIT:
somthing like [snakso](https://www.crowdstrike.com/blog/http-iframe-injecting-linux-rootkit/) but it should inject html code in …

browser computerforensics html inject malware rootkit