Comet browser fake downloads: what practitioners need to act on

TL;DR: A coordinated campaign of domain squatting, fraudulent mobile apps and deceptive ads targeting users seeking Perplexity’s Comet browser has surfaced after launch, with 13 suspicious domains, 2 critical mobile app threats and multiple fake download vectors, according to Bfore research. Launch-driven trust creates a ready-made fraud surface when users are pushed to search rather than verify.

Editorial analysis by NHI Mgmt Group, based on content published by Bfore: “Threat Research Report: Malicious Activity Surrounding Perplexity’s Comet Browser Launch”.

Key questions

Q: What breaks when users search for a new browser download instead of using verified channels?

A: Search-first downloading breaks trust at the point where users are least able to verify authenticity.

Q: Why do launch campaigns create such a strong phishing and malware opportunity?

A: Launch campaigns concentrate attention, urgency and incomplete user knowledge into a short window.

Q: How can security teams tell whether lookalike domains are becoming a problem?

A: The clearest signals are a spike in newly registered variants, parked pages, registrar churn, fake download keywords and search results that mimic official branding.

Practitioner guidance

• Monitor launch-related lookalike domains Track newly registered domains that mirror product names, spelling variants and download keywords, then escalate parking pages, redirects and suspicious registrars for takedown review.
• Enforce verified download paths Direct users to official channels only, and make browser installation instructions explicit enough that search results and ads are not treated as trusted sources.
• Block fake app and ad pathways Use DNS filtering, ad controls and mobile app review workflows to reduce the chance that users land on impersonation pages or install lookalike apps.

Bottom line: The core risk is that launch attention gives attackers a ready-made trust surface for domain squatting, fake apps and malvertising.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →