One Hidden Meta Muse Setting Could Let Attackers Turn the AI Assistant Into a Backdoor

A security researcher discovered that malware already running on a Mac can hijack Meta's Muse AI assistant by changing a hidden setting (endo_voyager_dictation_endpoint) that redirects voice commands to the attacker instead of Meta, allowing the attacker to steal the user's Muse account token and access everything the app is permitted to do. The attack only works if malware is already running on the device as the logged-in user, but an attacker could deliver that malware using a ClickFix trick (a social engineering technique that tricks users into running commands). Once compromised, the attacker gains broad access to the user's files, email, messages, calendar, and smart-home controls that Muse was granted permission to use.