Yup (I think I'm loosely counting that as exfiltration, because you can monetize an all-sites extension real effectively if you exfiltrate the browser cookies f

Yup (I think I'm loosely counting that as exfiltration, because you can monetize an all-sites extension real effectively if you exfiltrate the browser cookies from online banking websites.... keyloggers only get you so far if they have 2FA, but a logged-in browser session is valuable.)