Experts uncovered malicious Chrome extensions that replace affiliate links, exfiltrate data, and steal ChatGPT authentication tokens from users.
The scheme — reminiscent of "Catch Me If You Can," the movie starring Leonardo DiCaprio — lasted four years, U.S. prosecutors said.