TLDR InfoSec · ATTACKS & VULNERABILITIES

MASSIVE BROWSER HIJACKING CAMPAIGN INFECTS 2.3M CHROME, EDGE USERS

theregister.com3 min read

Summary from the TLDR InfoSec newsletter

A popular Chrome color picker extension with 100,000+ downloads and Google's verified badge secretly hijacks browsers, tracks user activity, and creates backdoors. It's part of "RedDirection," a campaign involving 18 malicious extensions that infected 2.3 million users.