Twitter's rebranding to 'X' triggers Microsoft Edge security alert

[Gandalf_The_Grey]

Microsoft Edge web browser has been displaying security warnings after Twitter changed its name to 'X'.

Amid its rapid rebranding over the last few days, Twitter (or X) has also ditched the famed bird icon for a Unicode character which resembles the letter X but infact bears Mathematical meaning.

But Microsoft Edge warns this is a potential security issue—and it's working as intended. It's got to do with a security feature dubbed 'Progressive Web App Icon change', designed to alert users of app icon or name changes, possibly indicating a scam.

Since 2021, both Chrome and Edge added this safety alert that triggers when a PWA changes its original icon or name.

To summarize, if your web browser rings alarm bells post Twitter's rushed rebranding, don't panic.

Twitter's rebranding to 'X' triggers Microsoft Edge security alert

Microsoft Edge web browser has been displaying security warnings after Twitter changed its name to 'X'. It's got to do with a security feature dubbed 'Progressive Web App Icon change', designed to keep users safe during app icon or name changes.

www.bleepingcomputer.com

 

[Sandbox Breaker - DFIR]

Sounds like Microsoft

 

[WyntechUmbrella]

If both Chrome and Edge have that feature and it triggered only Edge, does it means Google was more efficient at whitelisting it as safe ? Or that Edge feature was more efficient at detecting the icon change ?

On a related note, I logged in to Twitter when the name change just happened and I thought Twitter had been hacked. After checking the URL and certificate, I then thought it was a temporary event (such as a change of logo in support to a caritative cause). Then when I read the news I thought Elon was making a prank. Now I understand what's going on: we just live in a really weird world .

 

[TairikuOkami]

Or that Edge feature was more efficient at detecting the icon change ?

This. It does not rely merely on the icon change, it detects changes in the code.

Hackers hide credit card stealing script in favicon metadata

Hackers are always evolving their tactics to stay one step ahead of security companies. A perfect example of this is the hiding of malicious credit card stealing scripts in the EXIF data of a favicon image to evade detection.

www.bleepingcomputer.com

 

[Sammo]

Twitter's rebrand to X is causing scam alerts on Microsoft Edge | Engadget

Microsoft Edge's Progressive Web App Icon Change (PWA) indicates Twitter's rebrand to X may be a scam..

www.engadget.com