Hackers Target Perplexity Comet Browser Users

Shortly after Perplexity launched its Comet AI browser, threat actors began luring users to fraudulent domains and fake applications, according to SecurityWeek. Launched in July, Comet is a Chromium-based browser that integrates Perplexity’s AI assistant, with support for automating tasks, organising emails, and researching the web.

Beginning in August, an increase in fraudulent domains promoting an executable version of the browser surfaced on third‑party sites, with analysis of over 40 suspicious domains revealing typo-squatting, brand impersonation and deceptive advertisements. Eight of the domains were registered after Comet’s launch, including cometai[.]site, cometaibrowser[.]com, perplexitycomet-ai[.]com, cometbrowser[.]net and aicometbrowser[.]com, and the cometai[.]net domain has been parked for $9,999 on GoDaddy.

BforeAI also identified two critical‑level mobile threats in Google Play Store, such as Comet AI Atlas App Info impersonating the browser, and a fraudulent iOS application identified earlier this month. Google ads and social media promotions directed users to fake sites linked to the same campaign, with domain registrations timing closely following Comet’s launch timeline and using international registrars, privacy protection services and parking pages to coordinate the activity.