Unknown MacBook Added to My iCloud – Security Concern
Hello,
Earlier today, I received a notification that a new MacBook was added to my iCloud account and have access to my massages then a two-factor authentication code was sent my phone.
For safety, I immediately:
- Removed the unknown device
- Signed out all my devices
- Changed my Apple ID password and signed back in only on my 2 main devices for now
About an hour later, I also got a suspicious activity alert from my stock trading app (from a foreign country), asking me to upload documents. I didn’t see any withdrawals, but this feels connected.
My questions are:
- is it possible that someone added the device first and then received the code since my phone number is one of the trusted ways for 2FA? (I’m confused about this - it doesn’t make sense!)
- Is there a way to see from where (location/IP) that MacBook tried to connect to my iCloud?
- After I removed the device and changed my password, can I still track login attempts? Do you have any suggestions for extra steps for security?
Thanks in advance for any guidance!
