Chrome browser extension steals users’ bank data.