The answer engine’s name was the lure

Microsoft disclosed on 29 June a malicious browser extension impersonating Perplexity. Researchers assessed that its main purpose was intercepting search traffic and collecting data. They said Google took the extension down after responsible disclosure.

The results could still look familiar

The reported extension routed search queries and suggestions through infrastructure unrelated to the genuine vendor before sending users toward expected search providers. That sequence let the visible results retain a familiar appearance while exposing information earlier in the process. The case concerns an impersonating extension, not a finding that the legitimate Perplexity product performed the activity. Checking an extension’s actual publisher and permissions remains a separate step from recognising the brand it displays.