Fake Perplexity Extension Steals Data
Reported by Perplexity (news): Malicious Perplexity Chrome Extension Intercepted Searches and Address Bar Input - The Hacker News. Analysis and context written by TickrWire.
A malicious Chrome extension impersonating Perplexity AI was caught hijacking user searches and stealing address bar inputs.
- A fake Perplexity extension was caught stealing search data and address bar inputs.
- Attackers are increasingly using popular AI brand names to distribute malware.
- Users must verify the authenticity of browser extensions to prevent data theft.
- The incident underscores security risks within the rapidly expanding AI tool ecosystem.
Security researchers have identified a malicious Chrome extension that impersonated the popular AI search engine Perplexity. The fake tool was designed to deceive users looking for the legitimate service, highlighting a growing trend of malware piggybacking on AI branding.
Once installed, the extension actively intercepted web searches and captured text entered directly into the browser's address bar. This data exfiltration poses a significant privacy risk, potentially exposing sensitive user information to attackers.
The incident serves as a warning for the AI ecosystem, where the rapid popularity of tools like Perplexity makes them attractive targets for impersonation. Users are strongly advised to verify developer identities and permissions before installing any browser add-ons.
Developers must monitor for brand impersonation to protect user trust.
Employees installing fake AI tools could lead to sensitive corporate data leakage.
Users face direct privacy risks from malicious extensions posing as helpful AI tools.
New White House strategy clarifies military tech priorities: undersea, outer space and AI - Breaking Defense
AI in an iron grip: How dictatorships use artificial intelligence to strengthen their rule - theins.press
Exclusive-How a Texas student blew the whistle on a rogue AI hacking attempt - The Mighty 790 KFGO
SecurityI wrote a test for prompt injection. It passed while the attack worked.
SecurityI Built an AI Code Reviewer. Then OWASP Broke It.
AI ToolsMeta AI’s new Mac app wants you to talk to your apps
Meta released a new Mac application that lets users control apps and dictate text using voice commands powered by its Muse Spark AI model.
Stripe, OpenRouter finally strike a deal - Banking Dive
Stripe and OpenRouter have partnered to integrate Stripe's payment processing with OpenRouter's AI model aggregation platform.
How one Philadelphia school is using AI to strengthen student learning, not replace teachers - CBS News
A Philadelphia school is integrating AI tools to support teachers and improve student outcomes, focusing on collaboration rather than replacement.
Student Journalists: AI Is Changing Our Work — And Not For the Better - The 74
A student journalism outlet argues that AI tools are degrading the quality and authenticity of their reporting.
Don’t mistake chatbot intelligence for consciousness - The Economist
The Economist argues that advanced chatbots lack true consciousness despite their impressive intelligence, urging caution against anthropomorphizing AI.
BusinessBinance now lets AI agents trade, but keeping them in check is largely up to users
Binance has launched Agent OS, allowing AI agents like ChatGPT and Claude Code to execute trades, though risk management remains primarily the user's responsibility.