The free add-ons generally claimed to warn users about online risks but instead stole browsing history and business login data, according to researchers at cybersecurity firm Awake Security.
The extensions’ developers provided false information when supplying their work to Google, Awake said, so their identity is unclear.