Chromium extension uses AI‑related branding to redirect browser search

This Microsoft Security Blog feed contains multiple June 2026 threat reports and research updates. Key items: a malicious Chromium extension spoofing AI-branded services (Perplexity AI) that uses MV3 extension APIs and intermediary infrastructure to redirect browser search traffic; a multi-stage “photo ZIP” campaign targeting hospitality organizations in Europe and Asia that uses fake image shortcut files to drop a persistent Node.js implant; a technical breakdown and takedown of the StealC and Amadey infostealer ecosystems by Microsoft’s DCU; AutoJack research demonstrating how a maliciousweb