Check for unauthorized remote access to my Macbook

Before calling into support, what should I check to see if there has been unauthorized remote access to my MacBook (Pro M1)? I know basic checks like making sure my Apple ID (email address), My name and personal info hasn't been changed (as explained by a support rep on a recent call). However, I don't recall a few other checks he had me perform (and said I could start with in the future) as I was preoccupied with solving the issue at hand at the time. I didn't stop to write them down. We touched on the topic during some downtime while troubleshooting.


Thanks in advance!

MacBook Pro 14″, macOS 15.1

Posted on Dec 6, 2024 2:47 PM

Reply
12 replies

Dec 6, 2024 3:36 PM in response to CarMelo Cherubin

Do a spotlight search for “activity monitor” and look for unknown IP addresses or arbitrary changes to the pressure on your RAM.


Go into settings and make sure your firewall settings are active.


If you have an app that monitors your network, check to see if they’re are unknown devices connected.


Those are the basics that I can teach you in a few minutes. but if you lose access to your device or if you know you are definitely hacked, then go into lock down mode in system settings and bring your computer to someone you know who can help you.

Dec 6, 2024 5:12 PM in response to MartinR

What makes you think your Mac was accessed remotely?

  • Did you install Teamviewer or other sharing app? No
  • Did you enable any Sharing in Settings (aka Preferences)? No
  • Something else? Nope


Who is the "he" you referred to in "I don't recall a few other checks he had me perform"? A scammer?

Apple Support


What "support" are you planning to call? Apple Support


Forgive for me, Martin, giving the impression that I was experiencing a potential intrusion. My VPN gave me an unfamiliar notification that "Another device on my network was attempting to access my Wi-fi." To the best of my findings, it was an issue between My Verizon Router (in Bridge mode) and my Netgear router (connected to the Verizon rforouter).


That threw me off, so I came here to ask what I should check in case of a potential issue. The "he" was an Apple Support rep that I was dealing with a few days ago while trying to figure out what kept waking up my Mac in the middle of the night. Call it paranoia; in today's cyber security climate, I get very antsy when my Mac does things that I didn't personally authorize or execute.

Dec 6, 2024 5:37 PM in response to CarMelo Cherubin

CarMelo Cherubin wrote:
Forgive for me, Martin, giving the impression that I was experiencing a potential intrusion. My VPN gave me an unfamiliar notification that "Another device on my network was attempting to access my Wi-fi." To the best of my findings, it was an issue between My Verizon Router (in Bridge mode) and my Netgear router (connected to the Verizon rforouter).

That threw me off, so I came here to ask what I should check in case of a potential issue. The "he" was an Apple Support rep that I was dealing with a few days ago while trying to figure out what kept waking up my Mac in the middle of the night.

I don't know your setup but it's very possible that a mere overnight refresh (aka re-lease) of your Mac's DHCP IP address could set off the message and wake your Mac.


It's also not clear to me how you have the 2 routers set up. Normally I would expect the Verizon router to be the main router and DHCP server, with any supplementary router (the Netgear in your case) being set up in Bridge mode. Note that when in Bridge mode it's important to make sure that the Bridge router is not handing out its own IP addresses; DHCP services in the Bridge router should be turned off. If not, all kinds of network confusion can occur.

Dec 8, 2024 1:33 PM in response to MartinR

Thank you, Martin! The bridge set up has been problematic so far.

The Verizon router was put into bridge mode at the suggestion of Verizon Support.


"Note that when in Bridge mode it's important to make sure that the Bridge router is not handing out its own IP addresses; DHCP services in the Bridge router should be turned off. If not, all kinds of network confusion can occur."


This is highly likely the reason for the issues as all I did to put the Verizon router into bridge mode was click a check box on a Verizon page. If there was another action required in the Verizon or Netgear router configurations for this to work correctly, then it was not done as I didn't do it.

As a matter of fact, as I'm writing this, I'm almost certain that it is the issue because when my devices are scanning for WiFi, BOTH router names appear in the available network list.


I will research how to make sure the setup is actually correct. Thank you so much for your response; it truly helped, Martin!

Dec 8, 2024 7:02 PM in response to CarMelo Cherubin

CarMelo Cherubin wrote:
As a matter of fact, as I'm writing this, I'm almost certain that it is the issue because when my devices are scanning for WiFi, BOTH router names appear in the available network list.

If both routers show up when your devices scan for WiFi it means that WiFi is enabled in both routers. This is generally not a good idea although there are cases where it may be useful. Careful planning of router locations & network setups are necessary if using both for WiFi.


In general, assuming you are on FiOS, if your Verizon router is the one connected to your ONT then it should not be in Bridge mode so it can provide DHCP services (IP addresses) for your internal LAN including WiFi.


Assuming your Netgear router is connected to one of the wired LAN ports on your Verizon router, the Netgear router should be the one in Bridge mode (so it doesn't hand out conflicting or duplicate IP addresses to devices on your LAN).


What is the reason you are using 2 routers in your network?

Dec 9, 2024 9:54 PM in response to MartinR

Martin,

Clearly, a lot of the challenge here is my ignorance of networking, unfortunately. Sprinkle in a lil cyber paranoia and it's a recipe for chaos.

The reason I wanted to use both routers was for better coverage around my house. The Verizon router is actually enough to cover my space (how I have it now; taken the Netgear offline).

Prior to "getting it," I was h3ll bent on having the Netgear involved because it is specified as "6" GHz router. I figured as far as reception goes overkill in a predominantly 5 GHz world couldn't hurt...


But it seems like the Netgear will end up being an expensive paper weight. I bought it 2 months before Verizon offered me their router for free. All in all, I was just annoyed to have bought something that didn't help upgrade my setup. 6 GHz might as well be zero. Maybe, down the line I can use it in a small home office or something.


Thanks again for your input.

Dec 10, 2024 6:30 AM in response to CarMelo Cherubin

You can extend your WiFi network by using 2 routers but it's not an ideal setup; even under the best of circumstances the handoff from one router to the other as you roam the house would not be seamless; and there could be channel conflict, which would reduce throughput. I'll add that 6GHz is not necessarily faster than 5GHz or even 2.4Ghz ... and its range is even less than 5GHz.


If your Verizon router is giving you sufficient coverage I'd say let sleeping dogs lie.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Check for unauthorized remote access to my Macbook

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.