Hey Kogure,
This type of threat is very common, especially in the scamming industry. The scammer will (ab)use the fullscreen feature of modern browsers and use an image to simulate the real browser. I have not seen one that claims to be a Chrome extension, however.
If you still have the URL of the redirect in your history, please do PM me the details. I’d love to get my hands on a live sample. If possible, link all redirects and not just the final URL.
For your own safety, I’d advise using uBlock Origin as your adblocker (if you’re using older software like Adblock Plus) and uMatrix as the “Chrome version” of NoScript. Both of these extensions are open-source and are highly regarded by many. The problem lies in your trusting of any website with executing JavaScript code. You really shouldn’t do this on certain websites. A script blocker such as uMatrix will help prevent a suspicious redirect from executing malicious code, sometimes even stopping the redirect itself.
Donovan
