Threat actors are abusing a legitimate Google Chrome sync extension using a fake Forcepoint extension to exfiltrate data and to send commands to infected browsers. See Also:

Read full article on bankinfosecurity.com