Meta’s Muse AI assistant has a zero-day that can turn it into a Mac backdoor
Patrick Wardle says a local zero-day can redirect Meta Muse dictation traffic and steal its account token.
Mac researcher Patrick Wardle found that a local process can change an undocumented Meta Muse setting that selects the dictation transcription server. Redirecting that traffic can capture voice prompts and the victim's Muse authentication token. The issue is not remote code execution; the attacker already needs local code execution through malware or social engineering. Muse may hold macOS permissions and links to WhatsApp, email, calendars, and other services, concentrating access an infostealer would otherwise collect separately.
- A local process can redirect Muse dictation to an attacker-controlled server.
- Captured data includes voice prompts and the Muse authentication token.
- This is not remote code execution; prior local access is required.
- Wardle advised users not to install the Muse assistant.
From the original article
3 min read at malwarebytes.comA simple terminal command can hijack Muse and use its extensive permissions to spy on Mac users and control their connected accounts.
By @MetallicaMVP · malwarebytes.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.