The threat actor infected victims with the Snow malware family – Snowbelt, Snowglaze, and Snowbasin – for persistent access.
Chrome can load pages before you click them, and with the right settings, the difference can be dramatic.