Malicious Chrome and Firefox extensions stole Axiom Trade and Padre session data, wallet state, tokens, and cookies from crypto traders. Six linked add-ons were tied to shared code and exfiltration infrastructure. #AxiomTrade #Padre #GhostApe