logo

Malicious Perplexity Chrome Extension Intercepted Searches and Address Bar Input

ID: 0d77d9a8-6f8c-505e-bb0e-4ad5b748fccb

STIX ID: report--0d77d9a8-6f8c-505e-bb0e-4ad5b748fccb

Feed Name: The Hacker News

Threat Score
60/100

Date Published: 2026-06-29

Date Updated: 2026-07-01

Author: [email protected] (The Hacker News)

...
...

Microsoft discovered and reported a malicious Chrome extension named "Search for perplexity ai" (ID flkebkiofojicogddingbdmcmkpbplcd) that impersonated Perplexity, set itself as the default search provider, and routed all address-bar input and search queries to an attacker-controlled domain (perplexity-ai.online) where the data (queries, keystrokes, headers, IPs, user agents) was logged before redirecting users to legitimate search results; Google removed the extension after responsible disclosure and users are advised to remove it and verify search settings and approved extensions.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.