An extension-reuse attack showing a malicious extension M reusing functionality from two legitimate extensions X and Y to indirectly access the network and filesystem of a targeted computer. The technique allows the malicious extension to discreetly download a malicious file and execute it.