TrendLabs: Malicious Chrome Extensions Found

Figure 1. Droidclub Infection Flow

REF: https://blog.trendmicro.com/trendlabs-security-intelligence/malicious-chrome-extensions-found-chrome-web-store-form-droidclub-botnet/