A man claiming to be an Iranian intelligence officer promised me he would reveal his country’s secrets. Then he disappeared.

Malicious extensions occasionally find their way into the Chrome Web Store (and similar libraries in other browsers) by posing as legitimate add-ons. Some of them only morph into malware after gaining ...