Over 100 Chrome extensions sharing C&C infrastructure were seen stealing user data, injecting ads, and containing a backdoor.
All extensions seem to have been made by a single actor, possibly of Russian origin.