[tomek@vz]

Several browser extensions with a combined total of more than 2.3 million downloads were reportedly hijacking browsing sessions and tracking user activity. Many of these malicious add-ons remained available on the Chrome and Edge web stores for years, with some even receiving the coveted "Featured" and "Verified" badges, raising serious questions about the extension review processes used by Google and Microsoft.
According to researchers at Koi Security, the malicious extensions were part of a coordinated operation involving at least 18 known add-ons listed on the Chrome and Edge extension stores. Dubbed "RedDirection," the browser hijacking campaign is believed to have infected more than 2.3 million users across both browsers, making it one of the largest operations of its kind ever documented.
One of the suspicious extensions, The Color Picker – Geco, had over 100,000 installs on Chrome and a 4.2-star rating from more than 800 reviews. It also received similarly high ratings on Microsoft's Edge Add-ons store, with over 1,000 installs, giving it an appearance of legitimacy.

> Techspot