Attackers placed legitimate browser extensions online and then silently delivered malicious updates to millions of users.

Over 2.3 million Chrome and Edge users were compromised by 18 seemingly legitimate browser extensions that turned into ...