You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Virus alert scam

I thought my MAC was being invaded by viruses and hackers. I called the pop-up number on the screen from "Apple" and the agent succeeded in getting me to screen share. Then i realized it was a scam. Did they get access to all my files?

Posted on Aug 21, 2019 2:55 PM

Reply
Question marked as Top-ranking reply

Posted on Aug 21, 2019 3:08 PM

If you gave them your root password, then yes they did. You cannot assume otherwise. Change the passwords to your financial institutions, iCloud, and your Mac ASAP. Probably worthy of a complete reinstallation of macOS.


Apple will never pop anything in your browser about viruses detected, use an Apple like support name, or ever provide a phone number to call.

Similar questions

13 replies
Question marked as Top-ranking reply

Aug 21, 2019 3:08 PM in response to 2st

If you gave them your root password, then yes they did. You cannot assume otherwise. Change the passwords to your financial institutions, iCloud, and your Mac ASAP. Probably worthy of a complete reinstallation of macOS.


Apple will never pop anything in your browser about viruses detected, use an Apple like support name, or ever provide a phone number to call.

Aug 21, 2019 11:46 PM in response to 2st

EtreCheck is a simple little app to display the important details of your system configuration and allow you to copy that information to the Clipboard. It is meant to be used with Apple Support Communities to help people help you with your Mac.

http://www.etresoft.com/etrecheck


Pastebin is a good place to paste the whole report...

https://pastebin.com/


Workable but harder for me to work with...the Note tool on the bottom of this editor's toolbar, as shown in the image, to copy and paste the output from EtreCheck.


There is also Malwarebytes...

https://www.malwarebytes.com/mac/


Or Mojave Cache Cleaner, which runs on more than just Mojave & can test for Key Loggers also...

https://www.northernsoftworks.com/mojavecachecleaner.html

Aug 21, 2019 3:37 PM in response to VikingOSX

Thanks. I basically got the alert, called the phone number, and then they directed me to a website that enabled them to screen share. I don’t recall giving them a password, but I may have signed in with Apple I. D.. is that what you mean by “Root” password? And would they be able to get credit card info if I use only PayPal?

Aug 22, 2019 11:31 AM in response to BDAqua

Thanks for all those recommendations! I installed Malwarebytes, and the scan came up clean, but not sure if it caught any previous activity or spyware which may have been installed/invaded. I then installed Avast Free. Also good scan results so far. Plus, I have identity theft protection, hoping never to have to use it!

So....At this point I guess all I can do is sit tight and wait. (?) Thanks for all the good tips.

Virus alert scam

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.