Malicious 'Search for perplexity ai' Extension — Search Hijack to perplexity-ai.online
Detects indicators of a specific malicious browser extension, including file-system artifacts (extension directory placement), registry-based persistence mechanisms, and network communication to associated command-and-control (C2) or onboarding domains. The rule specifically monitors for known malicious identifiers related to a typosquatted domain campaign impacting popular web browsers.
Cortex XDR
