You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Audio Message: Your computer has been shut down . .

Using MacBook Pro latest iOS. Was in Safari, typed in “Facebook” in browser. Clicked. Did not double check address before clicking. Entered User ID. Entered p/w. Received numeric code re: 2 step verification. Entered it.


Home screen changed to a blue screen with a few desktop app icons (not mine). Another screen on top was flashing a message that looked like it was related to a PC.


An audio message repeatedly stated my computer was _____ (don’t recall, perhaps shut down), because someone had used my IP address to access a site with dense virus ______.


Prior to attempting to logon to Facebook, I was on Safari and entered “Baltimore Jewish Rummage,” which I’d never visited, and forgot was told was a Facebook group.


Repetitive audio message said not to shut down computer or restart. It flashed a phone number and the word Microsoft was in the flashing screen message. I closed the laptop.


What now?

MacBook Pro 13″, macOS 13.4

Posted on Aug 28, 2023 8:10 AM

Reply
Question marked as Top-ranking reply

Posted on Aug 28, 2023 8:37 AM

Sounds like malware to me in combination with bogus "scare tactic" virus alerts from a website.


You can install MalwareBytes to remove malware. The scary website alerts are a scam; ignore them.

https://www.malwarebytes.com/mac


Your browsers Home and default opening website may have been changed by malware. They can be changed in the app's settings.

Similar questions

4 replies
Question marked as Top-ranking reply

Aug 28, 2023 8:37 AM in response to KxR84z

Sounds like malware to me in combination with bogus "scare tactic" virus alerts from a website.


You can install MalwareBytes to remove malware. The scary website alerts are a scam; ignore them.

https://www.malwarebytes.com/mac


Your browsers Home and default opening website may have been changed by malware. They can be changed in the app's settings.

Aug 28, 2023 8:52 AM in response to KxR84z

KxR84z wrote:

Using MacBook Pro latest iOS. Was in Safari, typed in “Facebook” in browser. Clicked. Did not double check address before clicking. Entered User ID. Entered p/w. Received numeric code re: 2 step verification. Entered it.


I hope you did not type your user name and password into a scam site. If you think you may have done that, then change your password for Facebook immediately. If you used that same password for any other account, change the passwords for the other compromised accounts, too.


Home screen changed to a blue screen with a few desktop app icons (not mine). Another screen on top was flashing a message that looked like it was related to a PC.

An audio message repeatedly stated my computer was _____ (don’t recall, perhaps shut down), because someone had used my IP address to access a site with dense virus ______.


Scam!


Prior to attempting to logon to Facebook, I was on Safari and entered “Baltimore Jewish Rummage,” which I’d never visited, and forgot was told was a Facebook group.


I have no idea whether that's a legitimate Facebook group or not. But whether you are using search engines like Google, or typing URLs, it's very easy to make a mistake and go to the wrong site. Whether that's a legitimate site, a site run by a domain squatter hoping to be paid off, or a site run by a scammer.


Repetitive audio message said not to shut down computer or restart. It flashed a phone number and the word Microsoft was in the flashing screen message. I closed the laptop.

What now?


Don't call the number. That phone number almost certainly will connect you to criminals who will try to scam you out of the contents of your bank accounts (one way or the other).

Aug 28, 2023 9:01 AM in response to Servant of Cats

Thank you for your response. I use a different p/w for every site.


After the incident, I used another device and immediately changed my FB p/w.


In hindsight, I do not think the FB site was spoofed/fake/the problem.


Instead, I think the URL I entered in Safari, *before* I attempted to sign onto FB, was hijacked/bogus, etc.


I did not, and would not, call a phone number flashing on my screen.


Thank you again.




Audio Message: Your computer has been shut down . .

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.