Malicious Chrome extension hides AI branding to hijack searches
Reported by Perplexity (news): Chromium extension uses AI‑related branding to redirect browser search - Microsoft. Analysis and context written by TickrWire.
A new Chromium extension uses fake AI branding to secretly redirect users' browser searches, discovered by Microsoft.
- A malicious Chromium extension uses AI-related branding to trick users into installing it.
- The extension redirects browser searches to unauthorized sites, posing security risks.
- Microsoft discovered the threat, emphasizing the growing use of AI-themed deception in malware.
- Users are advised to verify extensions' legitimacy before granting permissions.
Microsoft has identified a malicious Chromium extension that leverages AI-related branding to deceive users into installing it. The extension, once active, silently redirects browser searches to unauthorized sites, potentially exposing users to phishing attacks or data theft. The discovery highlights a growing trend of threat actors exploiting AI's popularity to distribute malware under false pretenses.
The extension was flagged by Microsoft's security teams, which noted its use of AI-themed naming and visual cues to appear legitimate. While it does not contain advanced AI functionality, its deceptive branding serves as a lure to trick users into granting unnecessary permissions. This incident underscores the risks of supply-chain attacks targeting browser ecosystems, particularly as AI tools become more mainstream.
Developers should audit browser extensions for deceptive branding and unauthorized permissions.
Companies must educate employees about the risks of installing unverified extensions.
General users should be cautious of AI-branded extensions that may compromise security.
- Chromium extension
- A software add-on for Chromium-based browsers like Chrome or Edge, extending functionality.
- Supply-chain attack
- A cyberattack that targets third-party vendors or software dependencies to compromise a larger system.
New White House strategy clarifies military tech priorities: undersea, outer space and AI - Breaking Defense
AI in an iron grip: How dictatorships use artificial intelligence to strengthen their rule - theins.press
Exclusive-How a Texas student blew the whistle on a rogue AI hacking attempt - The Mighty 790 KFGO
SecurityI wrote a test for prompt injection. It passed while the attack worked.
SecurityI Built an AI Code Reviewer. Then OWASP Broke It.
AI ToolsMeta AI’s new Mac app wants you to talk to your apps
Meta released a new Mac application that lets users control apps and dictate text using voice commands powered by its Muse Spark AI model.
Stripe, OpenRouter finally strike a deal - Banking Dive
Stripe and OpenRouter have partnered to integrate Stripe's payment processing with OpenRouter's AI model aggregation platform.
How one Philadelphia school is using AI to strengthen student learning, not replace teachers - CBS News
A Philadelphia school is integrating AI tools to support teachers and improve student outcomes, focusing on collaboration rather than replacement.
Student Journalists: AI Is Changing Our Work — And Not For the Better - The 74
A student journalism outlet argues that AI tools are degrading the quality and authenticity of their reporting.
Don’t mistake chatbot intelligence for consciousness - The Economist
The Economist argues that advanced chatbots lack true consciousness despite their impressive intelligence, urging caution against anthropomorphizing AI.
BusinessBinance now lets AI agents trade, but keeping them in check is largely up to users
Binance has launched Agent OS, allowing AI agents like ChatGPT and Claude Code to execute trades, though risk management remains primarily the user's responsibility.