Enlarge / One the left, a legitimate Chrome extension. On the right, one of seven recently discovered malicious Chrome extensions impersonating it. (credit: Radware) Criminals infected more than 100,000 computers with browser extensions that stole login credentials, surreptitiously mined cryptocurrencies, and engaged in click fraud. The malicious extensions were hosted in Google’s official Chrome Web Store. The scam was active since at least March with seven malicious extensions known so far, researchers with security firm Radware reported Thursday.