Ransomware vulnerability on MacOS

[Rekted]

People in my country has reportedly upload pictures of a ransom e-mail mailed to their iPhone that their Mac data is locked and ready to be destroy, of course unless a defined amount of ransom is paid.

 

Quote

Hackers are using Apple’s “Find My” service to remotely hold devices for ransom, reports MacRumors. Multiple people have tweeted about stolen accounts in the past week. Two-factor authentication does not prevent the hack - lifehacker

The advice is to turn off "Find my Mac" until official statements from Apple themselves

Source : https://lifehacker.com/disable-apples-find-my-device-to-stop-hackers-from-ra-1818618139

[Taswell]

where can i get this? I Dont want anyone to get into my computer to steal my stuff

[NumLock21]

18 minutes ago, ITheSpazI said:

where can i get this? I Dont want anyone to get into my computer to steal my stuff

What?

[Sauron]

21 minutes ago, ITheSpazI said:

where can i get this? I Dont want anyone to get into my computer to steal my stuff

Quote

we (as Slate did after Honan’s hack) recommend that all Apple users disable “Find My Device” unless absolutely necessary. And if you’ve ever used your iCloud password for a different service, change it now.

 

To disable “Find My iPhone,” go to the Settings app on your phone, tap the row at the top with your name and avatar, and scroll down to your list of devices. Tap the device you’re on. Tap “Find My iPhone” and toggle to Off. (You’ll be prompted to enter your iCloud password.)

 

To disable “Find My Mac” from your computer, go to System Preferences, click iCloud, and deselect “Find My Mac.” (You’ll be prompted for your password.)

 

You can only disable the “Find My” service for the device you’re currently using, so go do this on each device.

Instead of “Find My Device,” use a passcode or password on all your devices. 

There you go, read the article for more details.

[Princess Luna]

Well, glad I'm not an Apple user?

 

So much for the whole "Apple is safer" bulls... what makes something safe or not is the user not the OS.

[linustouchtips]

you can never ever get a virus on a apple 

[Windows7ge]

5 minutes ago, linustouchtips said:

you can never ever get a virus on a apple 

False. With the right code any OS or device can get infected. The ONLY reason you don't popularly hear about MacOS users getting viruses and the such is because hackers & programmers aren't writing software that is meant to affect that system.

 

Borderline anything is possible with code, using a mac doesn't make you impervious to viruses and the like. To think so is naive.

[linustouchtips]

1 minute ago, VegetableStu said:

He's joking I think

alternative facts 

[Windows7ge]

Just now, VegetableStu said:

He's joking I think

He might be trolling but a joke should be made more obvious like by using a particular profile pic or making a new LTT account with a name pertaining to what they said.

 

In other words I think it's a poorly executed joke. The joke itself is good, just poorly executed.

[linustouchtips]

Just now, Windows7ge said:

He might be trolling but a joke should be made more obvious like by using a particular profile pic or making a new LTT account with a name pertaining to what they said.

 

In other words I think it's a poorly executed joke. The joke itself is good, just poorly executed.

poorly perfected 

[captain_to_fire]

So it’s not a nasty crypto ransomware like that in Windows but hackers have stolen passwords and randomly locks down iPhones and Macs vis find my device. So OP, it’s not a virus nor malware because there’s no malicious file involved. It’s not even a zero day vulnerability. 

[Master Disaster]

[AG1233]

1 hour ago, Princess Cadence said:

Well, glad I'm not an Apple user?

 

So much for the whole "Apple is safer" bulls... what makes something safe or not is the user not the OS.

 

Eh,Not that I agree with that statement and I might be wrong about this but wasn't Wannacry was spreading on Windows machine through a exploit in the OS,whereas this is not a exploit in the OS rather just email scams or password leaks and devices getting locked due to stupidity of using same password everywhere.

[Dylanc1500]

Sent from Apple.help? This is the devices being locked but a scam email trying to make you believe they are "going" to lock you out of your device. This is no different than any other scam email that yo have sent to you.

[Hiitchy]

@DrMacintosh actually was looking for your piece on this. 

[Drak3]

13 minutes ago, AG1233 said:

 

Eh,Not that I agree with that statement and I might be wrong about this but wasn't Wannacry was spreading on Windows machine through a exploit in the OS,whereas this is not a exploit in the OS rather just email scams or password leaks and devices getting locked due to stupidity of using same password everywhere.

It's not the same kind of vulnerability as Wannacrypt, but it is a vulnerability, and an exploit of a security feature.

[AG1233]

10 minutes ago, Drak3 said:

It's not the same kind of vulnerability as Wannacrypt, but it is a vulnerability, and an exploit of a security feature.

Yeah,I realised the same thing after posting that its still a vulnerability in the software my bad.

4 minutes ago, VegetableStu said:

yeah you're agreeing with the "on-the-user" part of the comment

When I said that I don't agree with statement I meant the statement of apple being safer. 

 

[DrMacintosh]

So this is an email.....how is this actually affecting anything? Is there a sandbox exploit? Where is the evidence of actual data being held? 

 

From in what I can tell it’s just an email that wants you to pay. 

[WMGroomAK]

37 minutes ago, DrMacintosh said:

So this is an email.....how is this actually affecting anything? Is there a sandbox exploit? Where is the evidence of actual data being held? 

 

From in what I can tell it’s just an email that wants you to pay. 

Based on some of the stories I've read on this, it sounds like there is a group of individuals that are using stolen iCloud Credentials to login and use the Find my iPhone feature to lock devices with a new passcode and then demand a crypto-currency ransom.

 

http://bgr.com/2017/09/21/macbook-icloud-ransom-hack/

https://www.macrumors.com/2017/09/20/hackers-find-my-iphone-remote-mac-lock/

[79wjd]

2 minutes ago, WMGroomAK said:

Based on some of the stories I've read on this, it sounds like there is a group of individuals that are using stolen iCloud Credentials to login and use the Find my iPhone feature to lock devices with a new passcode and then demand a crypto-currency ransom.

 

http://bgr.com/2017/09/21/macbook-icloud-ransom-hack/

https://www.macrumors.com/2017/09/20/hackers-find-my-iphone-remote-mac-lock/

E.g. not a vulnerability, just dumb users.

[DrMacintosh]

6 minutes ago, WMGroomAK said:

Based on some of the stories I've read on this, it sounds like there is a group of individuals that are using stolen iCloud Credentials to login and use the Find my iPhone feature to lock devices with a new passcode and then demand a crypto-currency ransom.

 

http://bgr.com/2017/09/21/macbook-icloud-ransom-hack/

https://www.macrumors.com/2017/09/20/hackers-find-my-iphone-remote-mac-lock/

So this isn’t an issue. It affects those with weak passwords. 

[PlayStation 2]

In the strictest sense, this could be considered a vulnerability. But it's also quite easy to prevent this from ever happening to one.

[Bananasplit_00]

6 hours ago, linustouchtips said:

you can never ever get a virus on a apple 

my mom has said that so many times... its depressing

[BuckGup]

7 hours ago, Princess Cadence said:

Well, glad I'm not an Apple user?

 

So much for the whole "Apple is safer" bulls... what makes something safe or not is the user not the OS.

Yes because one incident ruins all reputation. Remember wannacry? 

[Princess Luna]

31 minutes ago, BuckGup said:

Yes because one incident ruins all reputation. Remember wannacry? 

Did you even follow what I said? The user is what matters not the OS.