All the discovered extensions used the same code patterns, had identical callback domain structures, used the network of mispelled domains, and had the same lists of permissions. Cybernews researchers ...

A set of 57 Chrome extensions with 6,000,000 users have ... the excessively risky capabilities, heavily obfuscated code, and hidden logic were enough for the researcher to label them as risky ...