Malicious Chrome Extension Impersonating Perplexity AI Steals User Search Data

Microsoft identified a malicious Chrome extension impersonating the AI search engine Perplexity, which intercepted and logged all user searches and address bar inputs. The extension transmitted every query and keystroke to an attacker-controlled server before redirecting users to legitimate results. Google removed the extension from the Chrome Web Store following Microsoft’s responsible disclosure. The specific name of the extension was not fully disclosed in the available content. The attack enabled unauthorized data collection of user search behavior and browsing activity.