Fox: 16 hijacked browser extensions expose 3.2 million users