Over 2.3 million Chrome and Edge users were compromised by 18 seemingly legitimate browser extensions that turned into Trojans through silent updates, hijacking browsers.