Malicious Chrome Extension flkebkiofojicogddingbdmcmkpbplcd Search Hijack Install

Ibrahim Saud@tektrix

•updated Jun 30, 2026•0•0•1

Detects the installation of a malicious Chromium extension masquerading as 'Search for perplexity ai'. The rule monitors for file creation events in the Chrome extensions directory matching the specific malicious extension ID, modification of the Chrome Preferences file, and outbound network connections from the browser to the identified C2 domain.