{"id":403824,"date":"2017-09-21T03:23:38","date_gmt":"2017-09-20T19:23:38","guid":{"rendered":"https:\/\/www.macrumors.com\/2017\/09\/20\/hackers-find-my-iphone-remote-mac-lock\/"},"modified":"2017-09-21T03:23:38","modified_gmt":"2017-09-20T19:23:38","slug":"hackers-using-iclouds-find-my-iphone-feature-to-remotely-lock-macs-and-demand-ransom-payments","status":"publish","type":"post","link":"https:\/\/people.utm.my\/asmawisham\/hackers-using-iclouds-find-my-iphone-feature-to-remotely-lock-macs-and-demand-ransom-payments\/","title":{"rendered":"Hackers Using iCloud’s Find My iPhone Feature to Remotely Lock Macs and Demand Ransom Payments"},"content":{"rendered":"

Over the last day or two, several Mac users appear to have been locked out of their machines after hackers signed into their iCloud accounts and initiated a remote lock using Find My iPhone.<\/p>\n

With access to an iCloud user’s username and password, Find My iPhone on iCloud.com can be used to “lock” a Mac with a passcode even with two-factor authentication turned on, and that’s what’s going on here.<\/p>\n

\"\"
Apple allows users to access Find My iPhone without requiring two-factor authentication in case a person’s only trusted device has gone missing.<\/p>\n

\"\"<\/p>\n

2-factor authentication not required to access Find My iPhone and a user’s list of devices.<\/em><\/center>
Affected users who have had their iCloud accounts hacked are receiving messages demanding money for the passcode to unlock a locked Mac device.
<\/p>\n
\n

Y’all my MacBook been locked and hacked. Someone help me @apple<\/a> @AppleSupport<\/a> pic.twitter.com\/BE110TMgSv<\/a><\/p>\n

\u2014 Jovan (@bunandsomesauce) September 16, 2017<\/a><\/p><\/blockquote>\n

<\/center>
\n
The usernames and passwords of the iCloud accounts affected by this “hack” were likely found through various site data breaches and have not been acquired through a breach of Apple’s servers.<\/p>\n

Impacted users likely used the same email addresses, account names, and passwords for multiple accounts, allowing people with malicious intent to figure out their iCloud details.<\/p>\n

\"\"<\/p>\n

It’s easy to lock a Mac with a passcode in Find My iPhone if you have someone’s Apple ID and password.<\/em><\/center>
\n
To prevent an issue like this, Apple users should change their Apple ID passwords<\/strong>, enable two-factor authentication, and never use the same password twice. Products like 1Password, LastPass, and even Apple’s own iCloud Keychain are ideal ways to generate and store new passwords for each and every website.
<\/p>\n
\n

So a hacker gained access to my iCloud account (despite two-factor authorization) while I was asleep this morning.<\/p>\n

\u2014 Jason Caffoe (@jcaffoe) September 20, 2017<\/a><\/p><\/blockquote>\n

<\/center>
\n
Users who have had their Macs locked will need to get in contact with Apple Support for assistance with removing the Find My iPhone lock.<\/p>\n

(Thanks, Eli!)<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"

Over the last day or two, several Mac users appear to have been locked out of their machines after hackers signed into their iCloud accounts and initiated a remote lock using Find My iPhone. With access to an iCloud user’s username and password, Find My iPhone on iCloud.com can be used to “lock” a Mac […]<\/p>\n","protected":false},"author":5817,"featured_media":403825,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"categories":[25],"tags":[68,69,59,26],"class_list":["post-403824","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technology","tag-apple","tag-macrumors","tag-media","tag-technology"],"_links":{"self":[{"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/posts\/403824","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/users\/5817"}],"replies":[{"embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/comments?post=403824"}],"version-history":[{"count":0,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/posts\/403824\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/media\/403825"}],"wp:attachment":[{"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/media?parent=403824"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/categories?post=403824"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/tags?post=403824"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}