SquareX has devised a new attack method that allows malicious browser extensions to impersonate legitimate ones for password ...