Malicious 'Search for perplexity ai' Extension Search Hijack
This rule detects the presence or installation of a specific malicious Chromium-based browser extension (ID: flkebkiofojicogddingbdmcmkpbplcd). This extension masquerades as a 'Search for perplexity ai' utility but is designed to hijack browser search queries by redirecting them to a typosquatted domain ('perplexity-ai.online') using declarativeNetRequest rules.
Sigma
