Apple’s Worldwide Developers Conference to kick off June 10 at 10 a.m. PDT with Keynote address

The Keynote will be available to stream on apple.com, the Apple Developer app, the Apple TV app, and the Apple YouTube channel. On-demand playback will be available after the conclusion of the stream.

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

icloud hacked, macbook disabled, have to pay to unlock

So after coming back from a long trip I turn my macbook on and it comes up with a message about icloud and I click ok on the message, restarts my computer and boots up into a lock screen saying my macbook is disabled and a strange email address at the bottom.

I've read up on it and contacted apple, it appears to be the ransomware thing thats been happening, hacking my devices and asking for money to unlock it.


Anyway, I had an appointment with the apple shop and they can restore my macbook but for a LARGE fee! Shouldn't this be free and covered by apple since its a backfire of their security feature? I can't reformat or restore the macbook myself because the device is locked at a firmware level. It's really frustrating.

Posted on Jun 2, 2017 12:03 AM

Reply
25 replies

Jun 2, 2017 5:38 AM in response to artdesign-boy

Are you referring to the WannaCry ransomware? That attack has absolutely effect Macintosh Computers running OS X.


if the computer is locked from iCloud you will need to log into iCloud and unlock the device provided you own it and it appears in your list of devices.


You may wish to change your Apple ID log/pass with a password you do not use for any other on line service. If you use your same log/pass combo with another service (e.g. Yahoo, Twitter, Facebook, etc.) and that service is "hacked" then the perpetrators have to only try typing this same combo in any other service to get into your other accounts.

Change your Apple ID password - Apple Support

https://support.apple.com/en-ca/KM205079


Change the Email associated with the ID if you wish to remove the email in use:

https://support.apple.com/en-us/HT202667


Also consider enabling two factor authentication if you have not done so already.

Availability of two-factor authentication for Apple ID - Apple Support


See this link regarding you security questions.

https://support.apple.com/en-us/HT201363

Jun 2, 2017 7:13 AM in response to artdesign-boy

artdesign-boy wrote:


... it appears to be the ransomware thing thats been happening, hacking my devices and asking for money to unlock it.



This is contrary to what you just said if you know it to be an "iCloud hack"

If you use the same user/pass for iCloud as you do for other services like Yahoo or Google and those were hacked then all someone has to do is guess if you use that same combo for iCloud and get in, that's not hacking, thats a just a policy you should avoid and consider a unique user/pass for critical services going forward.


...Shouldn't this be free and covered by apple since its a backfire of their security feature? I can't reformat or restore the macbook myself because the device is locked at a firmware level. It's really frustrating.

This is hardly a "backfire of their security feature". Among other security measures Apple provides two factor authentication as a supplement to prevent or lessen the likelihood of this happening.

Availability of two-factor authentication for Apple ID - Apple Support

Tools were available to you from Apple, either you did not know about them or did not want to use them so it's not Apple who is responsible, especially as stated earlier if you are using the same credentials for iCloud/Apple ID as you are for other services on line that were quite possibly the "hacked" services to begin with.


P.S. The line is not busy if you call Apple right now. I've been on the phone with several different advisors this morning working on a completely unrelated issue and the wait is minimal.

Jun 2, 2017 5:11 AM in response to etresoft

The mac hadn't been updated in months, like I mentioned I just came back from a long trip and turned the macbook on after all that time. It popped up with a lot of update messages and there was a message about icloud as well, which I didn't really read but i just clicked through everything and it restarted. But I then received an email, saying my Macbook had been locked with find my iphone, which I did not do and my macbook has been disabled when I boot up. The macbook is not in my devices list anymore, the repair staff told me it has now been registered to the hacker.

The Macbook is not under warranty anymore, it is 5years old. But I just want the security lock removed, it's ridiculous how apple can't disable it from their end, even when I can prove ownership, and I have to pay a costly fee to have the entire laptop erased and restored to factory. I don't mind too much about losing the data, I would reformat restore myself but can't because of the security lock, so it's really frustrating that they would make me pay the hefty fee just because of apple's security feature backfiring. I'm here seeking advice if this service can be free, I tried calling apple support again after the meeting with the repair centre but there lines were busy today.

Jun 2, 2017 5:30 AM in response to artdesign-boy

It wasn't an official apple store/centre, but an authorised apple service repair centre. The appointment was scheduled by apple support on the phone as it was the nearest one to me.


I would be asking them to explain just what they will be doing and why it's so expensive. You might also wonder how this has happened to you and to, well, no one else?


Do you have a bootable back up?


I'm not sure why you think Apple should be able to do things on your machine from "their end". Quite a security risk if they could, no?


As the machine is outside of guarantee, as it has not been kept up-to-date, then no, Apple would not do anything for free.

Jun 2, 2017 6:03 AM in response to Yer_Man

Terence after researching the problem I can tell you I am not the only person this has happened to but quite a few. Yeah I think I've got the OS disk somewhere, the problem is the macbook is locked before you can even boot from disks or go into recovery or safe mode.

Well Apple support had told me on the phone, the service centre would be able to remove the lock from their end, and you should be able to see how it would be a problem if they couldn't unblock their own security feature, if icloud accounts got hacked or even if someone locked there own device and forgot their passcode then apple can't even do anything about it.

Jun 2, 2017 6:11 AM in response to JimmyCMPIT

No not that one, there's been some similar stuff happening with apple devices as well over the past few years. I've recently read up on this one http://bgr.com/2017/03/24/iphone-icloud-hack-threat-is-real/ which I think is how they got my icloud account, as it was an outdated password which I commonly used. The macbook has been removed from my icloud account now and has most likely been registered to a new account with the hacker as the apple service people told me.

Jun 2, 2017 6:23 AM in response to Csound1

Csound1, no that wasn't the main point I was getting at with the article. It was proven that they had access to genuine iclouds accounts but aside from that article ransomware on macs have happened in recent years. This is the exact problem I'm having *** is many other people Possible Ransomware? | MacRumors Forums the lock screen on my mac comes up with the email address "applepass04@gmail.com" and according to others who have tried emailing that address, it asks them to pay through bitcoin to have their macbooks unlocked

Jun 2, 2017 6:29 AM in response to JimmyCMPIT

and at Jimmy, it has already been told to me by apple service that the macbook has been hacked through my icloud account and locked. But I think we are getting off-topic. I already know the problem with the macbook, I just wanted advice or if people have had experience with apple stores disabling this security feature or if I went to the official apple store if they would do it free. I'll give apple support another call tomorrow morning and hopefully the line is not busy

Jun 2, 2017 7:29 AM in response to JimmyCMPIT

Jimmy I agree that it's my fault my icloud got hacked. I don't care about that at the moment, my complaint is I can't even even restore the macbook myself because of the security lock, if I had a virus or got hacked on any other laptop I could always just erase the whole drive and reinstall myself, but in this case I can't do it myself because of the lock and have to pay a ridiculous fee to apple so they can do it. All I was hoping was they could remove the lock once I verified I owned the macbook, and if needed I would wipe and reinstall myself. I don't believe this should require a fee, you know I walk in, prove the mac is mine, they undo the "find my iphone" lock, all good. Ideal scenario, I'm just frustrated at all these hurdles along the way to do something that should be so simple.

PS It's very late at night where I am now

Jun 2, 2017 5:41 PM in response to Csound1

Csound1, I don't know what you mean? Apple (at least the service centre) is asking for money to unlock the device, that's my main reason for complaint, $200 fee. Anyway just an update, I emailed the email address that was on the lock screen of my mac... the response was:

Hello!


We have blocked your device. To continue using:

Pay 50$/0.04 BTC on the Bitcoin Wallet:

Buy bitcoins: coinbase dot com

Through a credit card you buy. Before you start, register on the site.

After payment, attach a screenshot or tell us the time of payment, we will send your password from your device within an hour.


The payment is given 12 hours.

In case of non-payment, your device will be permanently blocked.




Well the ransom is actually cheaper than the service fee of apple. But obviously it's a risk doing

Jun 2, 2017 10:56 PM in response to BobTheFisherman

Bob that wasn't the popup that came up for me, I would never fall for a scam like that. It was someone who gained access to my icloud account and locked my macbook with the find my iphone feature.


Anyway some news, I decided to take the hard drive out of my macbook and connect it to a desktop and I was able to access all my files. So a bit of good news, all my files are still there and I can back them up. But the macbook is still disabled so it means the lock feature is coded into the chips of the macbook (hence its called a firmware lock), so it's pointless even wiping the drive and do a reinstall. It makes me even more frustrated now because it means the lock is kinda useless in protecting my data anyway and just a massive inconvenience because apple can't disable it either when I brought it to them, they said they would need to send it in and reset the whole laptop.

icloud hacked, macbook disabled, have to pay to unlock

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.