A malicious “Safery: Ethereum Wallet” extension is currently live on the Chrome Web Store, using a crafty backdoor to exfiltrate seed phrases. Here’s how it works.