Đang tải bảng tin…
CSO Online0 Hot0 bình luận4 phút đọc
Malicious Chromium extension spoofs Perplexity AI to hijack browser searches
Microsoft Threat Intelligence discovered and reported a malicious Chromium browser extension impersonating Perplexity AI that intercepted users' search queries and routed them through attacker-controlled servers before forwarding to legitimate search engines. Google removed the extension after Microsoft's report. The extension exploited user trust rather than browser vulnerabilities — users expect AI tools to request broad permissions, making malicious requests blend in. Security experts warn this reflects a broader trend of attackers leveraging trusted AI brand names as social engineering lures. Enterprise security teams are advised to treat browser extensions as governed third-party software, using allowlists, permission reviews, and behavioral monitoring for risky extension activity.
Nguồn: https://www.csoonline.com/article/4191060/malicious-chromium-extension-spoofs-perplexity-ai-to-hijack-browser-searches.html. 8sync News chỉ tóm tắt và dẫn link; bản quyền nội dung thuộc tác giả và nguồn gốc.
Đề xuất cho bạn
It's Foss77 Hot7 phútAI
Linux Users Get This For Free! Brave Origin Costs $59.99 For Everyone Else
Brave Origin là phiên bản tối giản của trình duyệt Brave, loại bỏ các tính năng AI, ví …
