logo

Fake Perplexity Chrome extension spies on your searches

ID: fde2b5d1-14ac-5d89-b6e7-c4f2a2f52143

STIX ID: report--fde2b5d1-14ac-5d89-b6e7-c4f2a2f52143

Feed Name: Malwarebytes Blog

Threat Score
60/100

Date Published: 2026-07-01

Date Updated: 2026-07-02

...
...

A malicious Chrome extension posing as “Search for perplexity ai” routed searches through the typosquatted domain `perplexity-ai.online`, used declarativeNetRequest and chrome_settings_overrides permissions to capture and log users' queries (including keystrokes and metadata), and forwarded queries to real search engines to appear normal; Google removed it from the Web Store after Microsoft’s disclosure, but installed copies remain and should be manually uninstalled.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.