Malicious Perplexity AI Extension Omnibox Keystroke Capture via suggest_url

Ibrahim Saud@tektrix

•updated Jun 30, 2026•0•0•4

Detects network requests to a typosquatted domain 'perplexity-ai.online' initiated by a malicious browser extension. The extension uses the 'suggest_url' feature to exfiltrate keystrokes typed into the browser omnibox in real-time, effectively performing browser-based keylogging.