New details emerge about a network of rogue extensions for Chrome and Edge browsers that were found to hijack clicks to links in search results pages to arbitrary URLs, including phishing sites and ads. The 28 extensions in question made use of a sneaky trick to mask its true purpose: Leverage Cache-Control HTTP header as a covert channel to retrieve commands from an attacker-controlled server. The extensions have been taken down by Google and Microsoft as of December 18, 2020, to prevent more users from downloading them from the official stores.
Source: https://thehackernews.com/2021/02/over-dozen-chrome-extensions-caught.html