Malicious Chrome extension MutualsPro hijacks X accounts — logging out isn't enough
ChrisUniverse · x · 2026-11-15
A security incident on X: user ChrisUniverse got hit by the malicious extension MutualsPro because he didn't log out on the Mac it was installed on. salardev's remediation checklist:
- Remove MutualsPro via chrome://extensions on every computer
- Log out all sessions, change your password, enable 2FA
Key warning: an installed extension with X access can act as you in that browser, so logging out alone won't stop it — a cautionary account-security case for all X users.
More from Safety
- Security experts warn: many AI agents run headless Chrome with --no-sandbox — matthew_d_green · 2026-11-15
- Reddit user challenges Kaggle's mandatory biometric verification, seeks alternatives — nico_25 · 2026-11-15
- Cryptographer Matt Green calls out big accounts bullying open-weight cyber debate — matthew_d_green · 2026-11-15
- Polymarket: Musk says Tesla Cybercab cleared for nationwide rollout after regulatory approval — Polymarket · 2026-11-15
- CMS releases 'Clinical Super Intelligence' roadmap to pay for cost-lowering health AI — HealthcareAIGuy · 2026-11-15
- Decade-Old Warning Coming True: Model Self-Reports Collapsing Under Optimization Pressure — davidmanheim · 2026-11-14