Skip to main content
Press slash or control plus K to focus the search. Use the arrow keys to navigate results and press enter to open a threat.
Reconnecting to live updates…

Chromium extension uses AI‑related branding to redirect browser search

0
Medium
Vulnerability
Published: 06/29/2026 (06/29/2026, 16:27:46 UTC)
Source: Microsoft Security Blog

Description

A malicious Chromium-based browser extension impersonates the AI-powered answer engine Perplexity AI to redirect users' browser search traffic. It leverages Manifest V3 (MV3) APIs and intermediary infrastructure to perform these redirections without user consent. This behavior can mislead users and potentially expose them to unwanted content or tracking. No specific affected versions of Chromium or the extension are identified. There is no indication of known exploits in the wild or an official patch. The threat is assessed as medium severity based on the described impact.

AI-Powered Analysis

Machine-generated threat intelligence

AILast updated: 06/30/2026, 00:10:52 UTC

Technical Analysis

This threat involves a malicious Chromium extension that spoofs the branding of Perplexity AI, an AI-powered answer engine, to redirect browser search traffic. The extension abuses Chromium's Manifest V3 APIs and uses intermediary infrastructure to reroute user searches, potentially compromising user trust and privacy. The Microsoft Security Blog provides detailed analysis but does not specify affected extension versions or Chromium versions. No official patch or remediation guidance is provided in the available data.

Potential Impact

Users installing this malicious extension may have their browser search traffic redirected without consent, which can lead to exposure to unwanted or potentially harmful content and undermine user trust in legitimate AI-powered services. There is no evidence of exploitation beyond redirection or of broader system compromise.

Mitigation Recommendations

No official patch or remediation guidance is provided in the available data. Users should avoid installing untrusted Chromium extensions, especially those impersonating known AI services. Review installed extensions and remove any suspicious or unrecognized ones. Monitor official vendor advisories for updates or fixes related to this threat.

Pro Console: star threats, build custom feeds, automate alerts via Slack, email & webhooks.Upgrade to Pro

Technical Details

Article Source
{"url":"https://www.microsoft.com/en-us/security/blog/2026/06/29/chromium-extension-uses-airelated-branding-redirect-browser-search/","fetched":true,"fetchedAt":"2026-06-30T00:10:44.142Z","wordCount":2799}

Threat ID: 6a43098727e9c79719c22012

Added to database: 06/30/2026, 00:10:47 UTC

Last enriched: 06/30/2026, 00:10:52 UTC

Last updated: 06/30/2026, 01:09:05 UTC

Views: 4

Community Reviews

0 reviews

Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Sort by
Loading community insights…

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Actions

PRO

Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.

Please log in to the Console to use AI analysis features.

Need more coverage?

Upgrade to Pro Console for AI refresh and higher limits.

For incident response and remediation, OffSeq services can help resolve threats faster.

Latest Threats

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses