Fresh plugins let the long-running Windows malware follow victims, listen through the microphone and ride their browser sessions.