Malwarebytes discovered an extension for Chrome and Firefox that prevents its removal and hijacks the browser. It’s only installed manually although under tricky circumstances and you can remove it too with a few tricks.