You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Something possibly bad happened

I'm not sure if I just got hacked some information, my aunt asked for help for this unknown email asking her to pay her bills. I downloaded the attachment, unzipped it and there was this Unix file. I clicked it and it says :

-bash: /Users/inconnu/Library/Containers/com.apple.mail/Data/Library/Mail Downloads/22F9A43E-C9F5-45CF-8980-B8D8DA3BA0DE/scan 2/0b4699/M: cannot execute binary file

logout

Saving session...

...copying shared history...

...saving history...truncating history files...

...completed.


[Process completed]


Should I be worried ?

MacBook Air, OS X El Capitan (10.11.4)

Posted on Mar 29, 2016 4:23 PM

Reply
Question marked as Top-ranking reply

Posted on Mar 29, 2016 5:17 PM

Why would you trust the contents of an "unknown email"?

6 replies

Mar 29, 2016 5:19 PM in response to alberthai_

Never Ever click on unknown links sent to you in an email. Never Ever especially when you don't know where it is from.

Never download attachment files and unZip them


Yes most likely you have installed some malware.

You will now have to identify what malware you have installed (if you did) and then find the proper method of removing it.

What was the subject in email?

Try googling that with Malware mac added, see if you get results.


Without knowing anything else, little hard to advise.


Hope this helps, Greg

Mar 29, 2016 5:34 PM in response to alberthai_

alberthai_ wrote:


I'm not sure if I just got hacked some information, my aunt asked for help for this unknown email asking her to pay her bills. I downloaded the attachment, unzipped it and there was this Unix file. I clicked it and it says :

-bash: /Users/inconnu/Library/Containers/com.apple.mail/Data/Library/Mail Downloads/22F9A43E-C9F5-45CF-8980-B8D8DA3BA0DE/scan 2/0b4699/M: cannot execute binary file

logout

Saving session...

...copying shared history...

...saving history...truncating history files...

...completed.


[Process completed]


Should I be worried ?

highly unlikely.


bash is the command line shell.


It is saying that the file saved in the Mail downloads folder cannot be executed.


Often times if a file type is unknown, it is listed as a Unix file, which appears to be what happened here. When a file that is associated with Unix is double-clicked/opened, the default association is to launch Terminal, and pass the file to the bash shell to execute.


However, as Duane and EcoGreg indicate, you should not be trying launch unknown files.


With respect to your Aunt. Even if the email requesting she pay her bills is on-the-level, she should not click on ANY links or attachments in an email, as it could be forged. Instead, manually enter the web address or use a saved bookmark that she knows is correct, and see if the company that appears to be sending the bill has this bill on their web site. Or call them. Or go into their local offices. But never click on links that were handled to her on a silver platter.

Mar 29, 2016 7:11 PM in response to EcoGreg

Hi, thanks for the information. I was aware that this was a spam email with some potential malware but I still did it for curious reasons. Lol dumb on my part.

I searched it up and found an article on this type of email written from January. It's stating that it currently affects Windows computers only. I hope this is alright although I do not have any potential personal information.


Do you happen to know any type of scanner on OS X ? I only know those on Windows.

Something possibly bad happened

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.