Malicious Google Chrome and Edge Extensions Downloaded More than 2 Million Times - Here's How to Stay Safe From Being Tracked Online
GLOBAL, JUL 9 – The RedDirection campaign involved 18 browser extensions that covertly tracked users and hijacked sessions, affecting over 2.3 million Chrome and Edge users worldwide, researchers said.
- Security researchers from Koi Security uncovered a coordinated campaign of 18 malicious Chrome and Edge extensions downloaded 2.3 million times as of July 2025.
- The extensions initially appeared harmless and earned high ratings before updates silently introduced hidden malicious code that harvested sensitive browsing data.
- These add-ons hijacked browser activity, tracked visited sites, communicated with remote servers, and affected users across both Chrome and Edge browsers.
- Koi Security described the operation as a "carefully crafted Trojan horse" and urged users to uninstall suspicious extensions, clear browsing data, run malware scans, and monitor accounts.
- This widespread incident exposes ongoing vulnerabilities in the extension approval system and underscores the importance of carefully evaluating browser add-ons and obtaining them from trusted sources.
22 Articles
22 Articles
Millions of Chrome, Edge Users Affected by Hijacked Browser Extensions
More than 2 million users of Google Chrome and Microsoft Edge have fallen victim to what cybersecurity researchers at Koi Security call a “sophisticated” malware campaign—one of the largest browser hijacking operations the cybersecurity company has ever uncovered. The campaign—dubbed RedDirection—centered on a set of 18 malicious browser extensions that available for download from both Google’s Chrome Web Store and Microsoft’s Edge Add-ons, acco…
Chrome and Edge browser extensions secretly hijacked, spied on millions of users
According to researchers at Koi Security, the malicious extensions were part of a coordinated operation involving at least 18 known add-ons listed on the Chrome and Edge extension stores. Dubbed "RedDirection," the browser hijacking campaign is believed to have infected more than 2.3 million users across both browsers, making it...Read Entire Article
A spy network used 18 popular extensions to spy on Chrome and Edge users for years, before becoming malicious. This is the list of fraudulent extensions.
Add-ons that seem trustworthy steal data from your browsers.
Chrome and Edge browser extensions secretly hijacked, spied on millions of users - WorldNL Magazine
Serving tech enthusiasts for over 25 years. TechSpot means tech analysis and advice you can trust. WTF?! Several browser extensions with a combined total of more than 2.3 million downloads were reportedly hijacking browsing sessions and tracking user activity. Many of these malicious add-ons remained available on the Chrome and Edge web stores for years, with some even receiving the coveted "Featured" and "Verified" badges, raising serious quest…
Coverage Details
Bias Distribution
- 60% of the sources are Center
To view factuality data please Upgrade to Premium