Applications and browser extensions connected to popular AI services have become some of the most widely used modern tools for automation, data analysis, and content creation. Unfortunately, cybercriminals are also taking advantage of their growing popularity.
Cybersecurity researchers have warned about a malicious Chrome extension impersonating the leading AI platform Perplexity. The extension was published in the Chrome Web Store under the name “Search for perplexity ai” and appeared to be a regular search tool. In reality, however, it intercepted users’ search requests and forwarded them to servers controlled by attackers. The case was analyzed and reported by Microsoft’s cybersecurity team.
What is particularly concerning is that the extension could capture not only search queries, but also the characters users entered into the browser’s address bar before a search was even completed.
Why is this dangerous?
Many users automatically trust applications and extensions associated with popular AI services, assuming that they are secure and reliable. Cybercriminals rely precisely on this trust. Instead of directly attacking computers, they exploit users’ confidence in well-known brands and emerging technologies.
This case is not an isolated incident. In recent months, other malicious browser extensions and applications posing as AI tools have been discovered. Some have collected passwords, browsing history, email data, and other sensitive information. A few of these extensions have even been installed by hundreds of thousands of users.
These incidents raise broader questions not only about cybersecurity, but also about how users can assess the safety of technologies whose internal operations they cannot easily understand or evaluate.
How can users protect themselves?
✔ Install browser extensions only from official sources and verified developers.
✔ Check what permissions an extension requests before installation — pay particular attention to those requesting access to all visited websites, browser history, or entered data.
✔ Remove extensions that you no longer use.
✔ Whenever possible, use the official web versions of AI services.
✔ Regularly review the list of installed browser extensions.
Do not forget about updates
Keeping browsers updated remains one of the most effective security measures. Regular updates help address newly discovered vulnerabilities and reduce the risk of exploitation by attackers.
Whenever a technology becomes popular, it inevitably attracts the attention of cybercriminals. Today, AI tools are among their main targets. Before installing another “smart” extension, check who developed it and whether you really need it.
In cybersecurity, trust should never be automatic — it should always be verified.
Sources:
This material was prepared based on publications in the Microsoft Security Blog and Tom’s Guide – Online Security.
