[venomsnake]

Extracting banking information? Session intercept, credentials theft - you need some form of cooperation with the user and the browser to get them.

[mehrdada]

You don't necessarily have to be a Chrome extension to do that if you can run a native app. You could read Chrome address space as a debugger, for instance.