Color Picker Extension: A Trojan Horse in Disguise Hijacking Millions of Browsers
The Geco color picker extension, with over 100,000 downloads, is more than just a tool for choosing colors. According to Koi Security, it’s a cleverly disguised Trojan horse that hijacks browsers, tracks user activity, and is part of a larger campaign affecting millions. Update your defenses and uninstall it now!

Hot Take:
Who knew picking a color could turn into a full-on espionage gig? This Chrome and Edge extension has added a new hue to the color wheel: Sneaky Spy Gray. Who needs Netflix when you can watch your browser sessions being hijacked in real-time? Talk about a plot twist!
Key Points:
- Chrome and Edge extensions offering color picking tools are secretly hijacking browser sessions.
- This “trusted” extension has more than 100,000 downloads and a high user rating.
- The malicious activity is part of a larger campaign named RedDirection, involving 18 extensions.
- These extensions were initially clean and later updated with malware to spy on users.
- Over 2.3 million users are affected, making it a massive browser hijacking operation.
Already a member? Log in here