Morphus Labs identified a malicious Chrome extension that captures data posted by users online on any website. Malware files have a size far beyond the ordinary and far beyond what is usually inspected for anti-virus solutions. Once the extension installed it will monitor all the data that user posted on the website and sent to attackers, it includes login credentials, credit card details and other sensitive data. The extension was not required to lure victims to fake sites, instead the data is captured while establishing the connection with the legitimate site.”]
Source: https://gbhackers.com/google-chrome-extensions-steals-data/