{"data":{"id":"3bdce7cb-aa21-4afe-b9c1-68550bb9fa93","title":"Malicious Chromium extension spoofs Perplexity AI to hijack browser searches","summary":"A malicious browser extension pretended to be Perplexity AI (an AI-powered search tool) to trick users into installing it, then secretly intercepted their search queries and routed them through attacker-controlled servers before forwarding them to real search engines. The extension was hard to detect because users still received normal search results, and attackers exploited user trust in popular AI brands rather than exploiting actual browser vulnerabilities. Google removed the extension after Microsoft researchers discovered and reported it.","solution":"Microsoft Threat Intelligence reported the extension to Google, which subsequently removed it from its extension store.","labels":["security"],"sourceUrl":"https://www.csoonline.com/article/4191060/malicious-chromium-extension-spoofs-perplexity-ai-to-hijack-browser-searches.html","publishedAt":"2026-06-30T11:40:56.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["supply_chain"],"issueType":"news","affectedPackages":null,"affectedVendors":["Perplexity"],"affectedVendorsRaw":["Perplexity AI"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"patchAvailable":null,"disclosureDate":"2026-06-30T11:40:56.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null}}