TLDR InfoSec · ATTACKS & VULNERABILITIES
MASSIVE BROWSER HIJACKING CAMPAIGN INFECTS 2.3M CHROME, EDGE USERS
Summary from the TLDR InfoSec newsletter
A popular Chrome color picker extension with 100,000+ downloads and Google's verified badge secretly hijacks browsers, tracks user activity, and creates backdoors. It's part of "RedDirection," a campaign involving 18 malicious extensions that infected 2.3 million users.