Chrome extension posing as Perplexity intercepted inputs and searches

Colleagues, cybersecurity update: Microsoft identified the "Search for perplexity ai" extension logging searches and every character typed into the address bar.

- Summary: queries and keystrokes were sent to an attacker-controlled server; request headers, IP and user‑agent were recorded, then users were redirected to legitimate results.
- Mechanism: it altered the search provider and suggest_url via declarativeNetRequest.
- Risks: behavioural-data harvesting; credential theft not confirmed.
- Recommendations: remove the extension, verify browser search settings; in organizations, allow only vetted extensions and validate publisher/domain.

Why it matters: AI branding can mask malicious tools.

What additional measures would you recommend?

#cybersecurity #browsers #AI #extensions