MICROSOFT Threat Intelligence has identified a malicious Chromium extension posing as an AI-powered search tool, specifically imitating Perplexity AI. The extension was created to intercept search queries and collect user data by routing them through a suspicious domain (`perplexity-ai.online`). It employs advanced Chromium features to hijack search settings and captures real-time search suggestions without users' knowledge. This extension, classified as malicious, was reported and subsequently removed by Google.
The report emphasizes the risks of browser extensions, encourages organizations to enhance user awareness and security measures, and provides indicators of malicious behavior along with mitigation strategies.