Massive browser hijacking campaign infects 2.3M Chrome, Edge users

These extensions weren’t malware-laced from the start, researcher says

A Chrome and Edge extension with more than 100,000 downloads that displays Google’s verified badge does what it purports to do: It delivers a color picker to users. Unfortunately, it also hijacks every browser session, tracks activities across websites, and backdoors victims’ web browsers, according to Koi Security researchers.…