Malicious 'Search for perplexity ai' Extension Search Hijack via perplexity-ai.online

Ibrahim Saud@tektrix

•updated Jun 29, 2026•0•0•2

Detects file creation or modification events associated with the known malicious Chromium extension 'Search for perplexity ai' (ID: flkebkiofojicogddingbdmcmkpbplcd). The rule monitors for the installation of the extension and the creation of its declarativeNetRequest rule files (perplexity-rules.json, bing-rules.json, google-rules.json), which are used to hijack browser search queries and redirect them to a typosquatted domain.