Three million users installed 28 malicious Chrome or Edge extensions

Avast said it discovered the extensions last month and found evidence that some had been active since at least December 2018, when users started reporting issues with being redirected to other sites.