Malicious Perplexity AI Extension Two-Hop Search Query Exfil via perplexity-ai.online
This rule monitors network, proxy, and DNS traffic for connections to the domain 'perplexity-ai.online'. It identifies potentially suspicious activity by aggregating requests and distinguishing between general outbound traffic and traffic to specific endpoints, such as search queries that may indicate data exfiltration or reconnaissance.
Splunk (SPL)
