rynochopps

Q: Mac Possibly Got Hacked!!

This morning while on my desktop the curser was taken over and started going through files and clicking on them.  My mouse and intuos pad would work off and on so I disconnected from wi-fi and bluetooth.  From what I remember it happened a little right after I turned them off so I shut down the computer.  When restarting later I noticed file sharing and bluetooth sharing were on, so I turned them off.  My password file could have been taken so I've been changing passwords.

Is there any way I can find out how this happened, what may have been seen or taken, and keep it from happening again?

Also can this happen while it is in sleep mode?

 

Thank you so much

VIN, iMac (21.5-inch Mid 2010), iOS 9.3.2

Posted on Jul 15, 2016 1:12 AM

Close

Q: Mac Possibly Got Hacked!!

  • All replies
  • Helpful answers

  • by Linc Davis,

    Linc Davis Linc Davis Jul 15, 2016 10:06 AM in response to rynochopps
    Level 10 (208,000 points)
    Applications
    Jul 15, 2016 10:06 AM in response to rynochopps

    Were any other sharing services active, or have you installed any remote-access software, such as "Hamachi?"

  • by rynochopps,

    rynochopps rynochopps Jul 16, 2016 8:08 PM in response to Linc Davis
    Level 1 (4 points)
    Desktops
    Jul 16, 2016 8:08 PM in response to Linc Davis

    Would Dropbox count as a sharing service?  I have that in my finder.  Nothing else though.

  • by Linc Davis,

    Linc Davis Linc Davis Jul 17, 2016 6:02 PM in response to rynochopps
    Level 10 (208,000 points)
    Applications
    Jul 17, 2016 6:02 PM in response to rynochopps

    There are several possible causes for the behavior. Please take each of the following steps that you haven't already tried until it's resolved. Some may not apply in your case.

    1. Follow the instructions in this support article, and also this one, if applicable. A damaged or defective AC adapter could be the cause, even if it's the right kind.

    2. Press down all four corners of the trackpad at once and release. If there's any effect, it's likely to be temporary, and in that case the unit must be serviced or replaced.

    3. Disconnect or power off each Bluetooth or USB pointing device, one at a time, testing as you go. You may be able to identify one that's malfunctioning. By a "pointing device," I mean a peripheral that moves the cursor, such as a trackpad, mouse, trackball, or graphics tablet. A plain keyboard is not a pointing device. If you have a desktop model without a built-in trackpad, at least one external pointing device must be active at all times.

    4. If your model has an infrared receiver for use with an Apple Remote, disable it.

    5. This step applies if you're using a portable Mac with a built-in trackpad, and you also use an external mouse or trackpad. Open the the Accessibility pane in System Preferences and select Mouse & Trackpad from the menu on the left. Check the box marked

              Ignore built-in trackpad when mouse or wireless trackpad is present

    Credit for this observation to ASC member PattMK.

    6. Reset the System Management Controller.

    7. If you're using a Bluetooth trackpad or mouse, investigate potential sources of interference, including USB 3 devices.

    8. A swollen battery in a portable computer can impinge on the trackpad from below and cause erratic behavior. If you have trouble clicking the trackpad, this is likely the reason. The battery must be replaced without delay.

    9. A defective peripheral device or a damaged cable can cause the built-in trackpad of a MacBook to behave erratically. If you're using any wired peripherals, disconnect them one at a time and test.

    10. There's also a report of erratic cursor movements caused by an external display that was connected but not turned on.

    11. If you use Handoff, disable it in the General pane of System Preferences.

    12. If AirPlay mirroring to a TV is on, turn it off.

    13. If none of the above applies, or if you have another reason to think that your computer is being remotely controlled, remove it from the network by turning off Wi-Fi (or your Wi-Fi access point), disconnecting from a Bluetooth network link, and unplugging the Ethernet cable or USB modem, whichever is applicable. If the cursor movements stop at once, you should suspect a network intrusion. If they don't stop, an intrusion is not the cause.

    14. Make a "Genius" appointment at an Apple Store to have the machine and/or external trackpad tested.

  • by KiltedTim,

    KiltedTim KiltedTim Jul 17, 2016 6:04 PM in response to Linc Davis
    Level 9 (55,995 points)
    Mac OS X
    Jul 17, 2016 6:04 PM in response to Linc Davis

    Hamachi is not remote-access software. It's VPN software. There's a bit of a difference... LogMeIn is remote access software, and the company that produces it happens to own Hamachi as well. That does not mean Hamachi will let someone take control of your computer.

  • by JAGUK,

    JAGUK JAGUK Jul 18, 2016 2:56 AM in response to KiltedTim
    Level 1 (33 points)
    Servers Enterprise
    Jul 18, 2016 2:56 AM in response to KiltedTim

    Whilst your response seemed completely pointless in terms of helping the OP, I was interested to look into what Hamachi actually did as I'd never used it.... according the their website it is indeed a VPN service. However, it also has Log Me In's remote access bulit into it (see below quote).

     

    Unattended access

    Run Hamachi in the background of networked computers so you always have access even when they’re unattended. Available with Standard, Premium and Multi-network subscriptions.