ShellCodeX Intelligence Brief
HIGH
Cybersecurity
Malicious Perplexity-lookalike Chrome extension exfiltrates searches via proxy
Source headline: Malicious Perplexity Chrome Extension Intercepted Searches and Address Bar Input
Threat level
High
Signal strength
75/100
Source confidence
1 source
Published
2 hours ago
Intelligence Summary
Microsoft identified a malicious Chrome extension impersonating the AI search engine Perplexity. The add-on intercepted users’ searches and even keystrokes entered in the browser address bar. Queries were routed through an attacker-controlled server before users were redirected to legitimate results. This behavior can expose sensitive information such as queries, URLs, and other typed data. Google removed the extension from the Chrome Web Store after responsible disclosure.
Recommended Action
Review affected assets, schedule urgent remediation, and monitor related indicators.
Topics
Original reporting
The Hacker News
Malicious Perplexity Chrome Extension Intercepted Searches and Address Bar Input
Open original source