Facepalm: Security experts recently uncovered a malicious campaign that had been active for years. Unknown cybercriminals abused Chrome’s extension system to infect tens of thousands of systems, and many victims may still be vulnerable if they haven’t manually changed their browser’s configuration.

Socket Inc. researchers have identified 19 malicious extensions targeting Chrome and Edge users. The cybercriminal campaign primarily targeted Google’s browser, but one extension gained significant popularity on both Chrome and Edge. In any case, the analysts believe a single “mind” is behind the campaign – and it’s determined to keep going even after the extensions have been removed from both browsers’ stores.

All of the…