Malicious 'Search for perplexity ai' Extension C2 via perplexity-ai.online

Ibrahim Saud@tektrix

•updated Jun 29, 2026•0•0•1

This rule detects outbound network connections to the typosquatted domain 'perplexity-ai.online'. This domain is associated with a malicious Chromium extension masquerading as a 'Search for Perplexity AI' tool, which uses this domain for search-traffic interception and command-and-control (C2) exfiltration.