Millions of browser users have fallen victim to spyware extensions.