A coordinated campaign involving 100 malicious Chrome extensions has been identified stealing user data and creating persistent backdoors. The extensions, distributed across five developer accounts, share a common C2 infrastructure, suggesting a sophisticated state-sponsored or high-tier criminal operator.