logo

Massive browser hijacking campaign infects 2.3M Chrome, Edge users

ID: 7a29ac17-0a5c-514d-ab6e-12f9b0be84a0

STIX ID: report--7a29ac17-0a5c-514d-ab6e-12f9b0be84a0

Feed Name: The Register (Security)

Threat Score
78/100

Date Published: 2025-07-08

Date Updated: 2026-04-26

Author: Jessica Lyons

...
...

Koi Security researchers uncovered the RedDirection campaign: 18 seemingly legitimate Chrome and Edge extensions (including a popular Geco color picker) that, after silent updates, began surveilling users, exfiltrating visited URLs with unique tracking IDs, and redirecting browsers; the extensions have collectively affected over 2.3 million installations and several extension IDs are provided as indicators of compromise.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.