According to cybersecurity firm CertiK, malicious browser extensions can be used to steal sensitive information and funds.