The "Catch-All" malicious Chrome extension goes after every piece of data the victim posts on any website, including login credentials.