Chrome extensions called "Phantom Shuttle" stole user data for years before Google removed them from the Chrome Web Store after researchers exposed the malicious tools.