Users hit by multi-browser threat