Random Screen Share Request?

First, never use any kind of "anti-virus" or "anti-malware" software on a Mac. That's how you cause problems, not how you solve them.

Apple does not make random requests to share your screen. If you had a support case pending, you might have been sent a link in email to download an application for that purpose. Otherwise it was a commonplace scam—not malware.

Phony "tech support" / "ransomware" popups and web pages

If you weren't signed into iCloud, you then used this website, or you received an email to initiate it with.

If you don't believe me, you can easily verify it by calling and asking: Contact Apple for support and service - Apple Support

Imp68 wrote:

If you weren't signed into iCloud, you then used this website, or you received an email to initiate it with.

If you don't believe me, you can easily verify it by calling and asking: Contact Apple for support and service - Apple Support

My apologies. I actually did talk to Apple support and despite the fact I normally have iCloud disabled I must have had at least some part of it enabled.

I'm old. I forget stuff. 🙂

FWIW, Apple will never ever NEVER send anyone an unsolicited screen share request. Did I mention Never?

You would have to call Apple Support, get on the line with an advisor, if for some reason they want to do a shared screen, they would ask and would email you a code. But you would have to initiate the call.

If you get another one, reject it.

You're apparently on an open IP network, and have screen sharing enabled via System Preferences. Someone spoofed the connection source, most likely. If you're not on an open network, then there's an issue with the network gateway firewall router box, or somebody on the local network is into shenanigans, or there's something installed on your local system that assisted in initiating the connection.

Apple can initiate a screen sharing request provided you are signed into iCloud and running a newer version of OS X (Yosemite or higher, I believe). It's possible they were helping someone and typoed the Apple ID, sending the request to you by accident.

(They have another way they can do it, too, but that wouldn't apply for what you experienced.)

Imp68 wrote:

Apple can initiate a screen sharing request provided you are signed into iCloud and running a newer version of OS X (Yosemite or higher). It's possible they were helping someone and typoed the Apple ID, and sending the request to you by accident.

I don't think that's correct. I've had two screen shares with Apple in the last year and I wasn't signed into iCloud nor did they request I do so.

How do you know it was from Apple?

It is correct. You did it using the older method, then.

Mystery solved.