Red flag: extension requests access to ALL websites with no explanation. That's how it executes phishing — injecting credential-stealing scripts site-wide. Security professionals have flagged this as MALICIOUS.