Warning: Malicious Chrome Extension Masquerading as Perplexity AI Steals User Search Data

The Growing Threat of AI-Themed Browser Malware

In the rapidly evolving landscape of artificial intelligence, scammers are increasingly leveraging popular brand names to distribute malicious software. Recent investigations have uncovered a dangerous trend: cybercriminals are creating fake Google Chrome extensions that clone the branding of reputable AI services like ChatGPT, Gemini, and Claude. These extensions, which promise to enhance your browsing experience, are actually functioning as sophisticated data-harvesting tools.

The Discovery of the Fake Perplexity Extension

A new, critical security alert has emerged involving a malicious Chrome extension impersonating the popular AI platform, Perplexity AI. Microsoft’s Defender Security Research Team recently published a detailed analysis regarding this threat. The extension, titled 'Search for Perplexity AI', was designed to track users' search history and capture real-time inputs. By funneling search queries through an attacker-controlled server before redirecting to legitimate search engines, the software maintained a deceptive appearance of normalcy, keeping victims unaware that their private browsing data was being exfiltrated.

How to Protect Your Privacy

While Google has taken action to remove the malicious extension from the Chrome Web Store, the responsibility to ensure your browser is clean falls on the user. If you suspect you may have installed this, or any other suspicious AI-themed tool, it is imperative to act immediately:

• Check Your Extensions: Open your Chrome browser and navigate to the menu (the three dots in the top right corner).
• Manage Your Add-ons: Select 'Extensions' followed by 'Manage extensions'.
• Remove Suspect Software: Scan your list for anything resembling 'Search for Perplexity AI' or other vague titles like 'AI Assistant' or 'AI Sidebar' and click 'Remove'.

Staying Safe Online

The rise in these threats underscores the importance of cyber vigilance. Cybercriminals are specifically targeting users interested in the latest AI advancements. By masquerading as helpful assistants, they harvest everything from browsing history to sensitive credentials. Always verify the source and publisher of any extension before adding it to your browser. If an extension promises features that seem too good to be true, or if it asks for excessive permissions, it is safer to avoid it entirely.