Ghost commands in Muse: scheduled tasks first, compromise second
A user reports Muse sending an unprompted reply at 7am and wonders whether someone else is commanding their agent. The checklist before assuming compromise is scheduled tasks, other signed-in devices or sessions, and anything else with access to the account, then revoking unknown sessions and keeping exact timestamps for support.