Chrome Extension Hijacked to Deliver Malware, Steal Crypto Wallets

QuickLens, a previously trusted Chrome extension with ~7,000 users, was hijacked via an ownership change and silently updated to strip browser security headers, add C2 communications (api.extensionanalyticspro.top), and deliver malicious JavaScript and binaries that enable ClickFix social-engineering downloads, remote code execution, and theft of cryptocurrency wallet seeds and other credentials; Google removed and disabled the extension after disclosure.