Millions of people spied on by malicious browser extensions in Chrome and Edge

Executive Summary: A widespread campaign abused 18 Chrome and Edge extensions (over 2 million installs) as sleeper agents to track browsing (URLs + unique IDs) and perform C2-driven browser hijacks that redirect users to fake update pages or malware, with extension IDs and malicious domains listed and most extensions now removed from the stores.