{"id":22952,"date":"2025-07-17T10:00:00","date_gmt":"2025-07-17T08:00:00","guid":{"rendered":"https:\/\/defenderbox.de\/?p=22952"},"modified":"2026-03-11T18:13:31","modified_gmt":"2026-03-11T17:13:31","slug":"redirection","status":"publish","type":"post","link":"https:\/\/defenderbox.de\/en\/redirection\/","title":{"rendered":"Everyday tools as a security risk"},"content":{"rendered":"
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

How popular browser extensions became spying tools<\/span><\/h2>\n
\n

Why companies should now take a closer look - and how they can protect themselves: What looks like a practical everyday tool - color picker, emoji keyboard, volume booster - can turn out to be a massive security risk. The latest case of a large-scale attack campaign shows just how dangerous browser extensions have become.<\/p>\n

At least 18 Chrome and Edge extensions have been installed millions of times over the years - well rated, officially listed in the Chrome Web Store, unobtrusive. But according to an Israeli security company, these popular browser extensions are spying tools. This is because the add-ons have been retrofitted with malicious code. The operation goes by the name of <\/span>\"ReDirection\"<\/strong> - Over 2.3 million users are affected.<\/span><\/p>\n<\/div>\n

\n

Particularly perfidious: the extensions were not malicious from the outset. They worked perfectly for a long time, collected good ratings - and thus enjoyed the trust of users. A single update was enough to turn them into tools for data theft and targeted redirects.<\/p>\n

Our recommendation at DEFENDERBOX:<\/span><\/h3>\n

We support you in identifying exploitable security gaps! How? Find out how secure your company really is! Now to the Familiarization price<\/a> the DEFENDERBOX<\/strong><\/span><\/a> test!<\/p>\n

The infected extensions analyzed every website visited, sent the data including the user ID to a remote server and redirected those affected to fake pages when certain triggers occurred - including:<\/p>\n