Malicious Perplexity Chrome Extension Intercepted Searches and Address Bar Input
ID: 0d77d9a8-6f8c-505e-bb0e-4ad5b748fccb
STIX ID: report--0d77d9a8-6f8c-505e-bb0e-4ad5b748fccb
Feed Name: The Hacker News
Microsoft discovered and reported a malicious Chrome extension named "Search for perplexity ai" (ID flkebkiofojicogddingbdmcmkpbplcd) that impersonated Perplexity, set itself as the default search provider, and routed all address-bar input and search queries to an attacker-controlled domain (perplexity-ai.online) where the data (queries, keystrokes, headers, IPs, user agents) was logged before redirecting users to legitimate search results; Google removed the extension after responsible disclosure and users are advised to remove it and verify search settings and approved extensions.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
