← Campaigns

RedDirection

Legitimate, long-clean Chrome and Edge extensions turned malicious via routine auto-updates. Koi found 18 (~2.3M users); Spin.AI expanded the same campaign to 36 extensions and ~16.5M users.

Extensions
36
Stores
Chrome, Edge
Updated
2025-07-08
Disclosed
2025-07-08

Member extensions

36 extensions
Campaign member extensions and their current risk
ExtensionStoreReported versionsCurrent risk
Video Speed Controller - Video managergaiceihehajjahakcglkhmdbbdclbnlfChromeNot specifiedUnscored
Unlock Discord - VPN ProxymlgbkfnjdmaoldgagamcnommbbnhfnhfChromeNot specifiedUnscored
Dark Theme - Dark Reader for ChromeeckokfcjbjbgjifpcbdmengnabecdakpChromeNot specifiedUnscored
Volume Max - Ultimate Sound BoostermgbhdehiapbjamfgekfpebmhmnmcmemgChromeNot specifiedUnscored
Unblock TikTokcbajickflblmpjodnjoldpiicfmecmifChromeNot specifiedUnscored
Unlock YouTube VPNpdbfcnhlobhoahcamoefbfodpmklgmjmChromeNot specifiedUnscored
Color Picker, Eyedropper - GecoeokjikchkppnkdipbiggnmlkahcdkikpChromeNot specifiedUnscored
WeatherihbiedpeaicgipncdnnkikeehnjiddckChromeNot specifiedUnscored
Unlock TikTokjjdajogomggcjifnjgkpghcijgkbcjdiEdgeNot specifiedUnscored
Volume Booster - Increase your soundmmcnmppeeghenglmidpmjkaiamcacmgmEdgeNot specifiedUnscored
Web Sound EqualizerojdkklpgpacpicaobnhankbalkkgaafpEdgeNot specifiedUnscored
Header ValuelodeighbngipjjedfelnboplhgediclpEdgeNot specifiedUnscored
Flash Player - games emulatorhkjagicdaogfgdifaklcgajmgefjllmdEdgeNot specifiedUnscored
Youtube UnblockedgflkbgebojohihfnnplhbdakoipdbpdmEdgeNot specifiedUnscored
SearchGPT - ChatGPT for Search EnginekpilmncnoafddjpnbhepaiilgkdcieafEdgeNot specifiedUnscored
Unlock DiscordcaibdnkmpnjhjdfnomfhijhmebigceloEdgeNot specifiedUnscored

Indicators

Download STIX →
Browse 1 indicators
TypeValue & evidence
domainadmitclick.netC2 / URL exfil + redirect

Research & sources

Read the investigation →