Cyber startup employee hacked to distribute malicious Chrome extension