Chrome Search Provider Hijack via perplexity-ai.online (flkebkiofojicogddingbdmcmkpbplcd)
Detects modifications to Chrome or Chromium browser preference files that indicate either the installation of a specific malicious extension or the overriding of the default search provider to a known suspicious domain (perplexity-ai.online). This indicates potential browser-based persistence or search hijacking.
Splunk (SPL)
