I was sent a disguised page where i put in my email address and password, although I think it was an attempt to hack into social networking sites still I'm worried if my mac could have been hacked?
It was from a webpage finishing with atwebpages.com or so..
Is there any way I can check that?
I have all sharing screen/remote etc switched off.
please help!
Mac Pro, Mac OS X (10.7.5)
The computer was not hacked, but the credentials you entered into the web form may have been stolen.
If you gone to System Preferences and shutdown all external sharing, and changed your email password you should be ok. You can also open Safari, go to Preferences and clear the history and Internet cookies so none of the websites have access without you granting permission.
Thank you, my sharing was always off, I've changed all passwords and I'll clear the history too but before I do that as there any command that I can run on my computer on terminal or something just to make sure it's not being accessed by anyone else?
Not Really necessary, but in Terminal, just typing who will show the users.
As Ralph says. Open Terminal, type who (enter).
It shows me my name twice, one saying console and one ttys001 , is that normal?
Normal.
tty just means you are using the standard input, the keyboard, Console is the ultimate message interface.
You are good to go.
Thank you very much 🙂
You are very welcome.
Phishing and especially spear-phishng are common and often in hopes of granting access if 1 in 5000 users make the mistake of opening email, to install something to grant access or load into a server and sniff or send out or monitor other traffic. Stealing credentials to gain access to another client.
It is not like you are Lockheed Martin or have an RSA key they want.
And if this was your friend's Fb account photo image, JPEG etc use to and can embed enough data even a small amount of code is all that is needed - getting users to drop their guide, trust the source, "social engineering" (and too often the convenience of clicking 9on email URLs to do something).
Reason for maintaing system backups that are bootable and off-line that you can trust.
For the benefit of anyone finding this discussion, the "who" command in the shell is not useful to determine whether a network intrusion has taken place.
I havent noticed any harm done so far, the link was a fake Picasa Album page where I logged in, at was ending with atmyweb.com or something like that ! Is there any way to find out if I was hacked ? I am just concerned about my pictures and docs on my computer !!
Is there a command to determine that ?? Or any other way to find out ??
If I understand your report, you opened a web page and typed some email credentials. If that's all that happened, then any Internet account linked to those credentials may well have been compromised, but not the computer itself. You must change the password immediately, if you haven't already done that because you were too busy reading comments on this page. There's no need to do anything else. Running a shell command—any command—would be an absurd waste of time.
Thank you for your guidance 🙂 ! Yes, it was some page , i'm assuming fake one ( of picasa web albums ending with atmywebpage.com) that required me to sign in and then took me to a page to download picasa (which i didn't download because I have the app already on my computer)
I have changed all my passwords of old and new email accounts as well as apple and of my laptop before posting the query. This happened yesterday, and the email address I put in was an old one that I am not using anyway. My main concern is only the data on my mac, sorry I guess I am being a bit paranoid !
Can my Mac be hacked via a webpage ?
