Desktop keyloggers are the easiest way. Just monitor for the clipboard and if people copy their keys into memory to insert into an extension or a native app, send it to the attacker.