Over the Christmas period, the perpetrators gained access to various Chrome extensions – in some cases even much earlier.