Malicious Chrome Extension declarativeNetRequest Traffic Relay via perplexity-ai.online

Ibrahim Saud@tektrix

•updated Jun 30, 2026•0•0•3

Detects the presence of specific file artifacts (extension ID 'flkebkiofojicogddingbdmcmkpbplcd' and associated traffic routing configuration files) belonging to a malicious Chrome extension that leverages declarativeNetRequest permissions to redirect browser traffic through an attacker-controlled relay domain.