Search for Perplexity AI Extension Keystroke Exfil to perplexity-ai.online

Ibrahim Saud@tektrix

•updated Jun 29, 2026•0•0•0

Detects outbound network traffic from common web browsers (Chrome, Edge, Brave, etc.) to the typosquatted domain 'perplexity-ai.online'. This rule identifies behavior associated with a malicious browser extension ('Search for perplexity ai') that exfiltrates keystrokes and search queries captured via the browser's Omnibox functionality to an attacker-controlled server.