The Chinese hacking group used the malicious add-on to collect Gmail and Firefox data from their victims.