Pretty sure I have had a major hack

Forums › Apple iOS and devices › Pretty sure I have had a major hack

1 | 2 | 3 | 4

13730 posts

Uber Geek
+1 received by user: 6202

ID Verified

Lifetime subscriber

#1875469 1-Oct-2017 13:20

Linux:

gnfb:

Jase2985:

its not theft, you still have your devices

true damage?

Is the device broken?

Linux

nope still works fine :)

just cant unlock it to get it, pretty much the same as forgetting your password

gnfb

2685 posts

Uber Geek
+1 received by user: 197

ID Verified

#1875470 1-Oct-2017 13:22

lxsw20:

Did you have 2 factor authentication enabled on your apple account?

not sure which will most likey mean no it wasnt

onto apple security now

Is an English Man living in New Zealand. Not a writer, an Observer he says. Graham is a seasoned 'traveler" with his sometimes arrogant, but honest opinion on life. He loves the Internet!.

I have two shops online allshop.nz patchpinflag.nz
Email Me

kyhwana2

2572 posts

Uber Geek
+1 received by user: 233

#1875471 1-Oct-2017 13:25

It sounds like your icloud account was hacked (Usually via password reuse or easilly guessable password).

If you had a PIN on your iphone, your existing PIN should work to unlock the iphone.

If your macbooks are locked the only way to get it unlocked is to take it to an authorised apple repair shop with proof of purchase and get them to unlock it.

To turn off lost mode: https://support.apple.com/kb/PH19299?locale=en_CA

You should be able to factory reset your iphone via itunes.

You need to change your iCloud password to someone decent (See https://www.cert.govt.nz/businesses-and-individuals/guides/keeping-yourself-safe-secure-online/how-to-create-a-good-password/) as the attackers probably have control of it now.

cadman

1014 posts

Uber Geek
+1 received by user: 557
Inactive user

#1875472 1-Oct-2017 13:27

Jase2985:

its not theft, you still have your devices

Actually I think it could successfully be argued it is theft, based on the definition in the Crimes Act 1961.

cadman

1014 posts

Uber Geek
+1 received by user: 557
Inactive user

#1875476 1-Oct-2017 13:33

richms:

You would need to read your policy about that, I know some got amended a while back to remove this sort of thing from the cover.

Yeah - insurance companies don't like covering anything with potential to actually occur.

gehenna

8667 posts

Uber Geek
+1 received by user: 3883

Moderator

Trusted

Lifetime subscriber

#1875483 1-Oct-2017 13:51

gnfb:

a measge came up saying somonew as trying to acces my account was it me

to which i clicked no

I think that was when it happende

Always always copy the link instead of clicking it, then paste it into a text window to see it if looks legit. Only then if you're 100% sure, click the link.

Geekzone support

Support Geekzone with one-off or recurring donations Donate via PressPatron.

michaelmurfy

meow
13579 posts

Uber Geek
+1 received by user: 10910

Moderator

ID Verified

Trusted

Lifetime subscriber

#1875489 1-Oct-2017 14:21

Also check https://haveibeenpwned.com - if you reuse passwords then you're doing it wrong. Sign up to something like Lastpass and change all your passwords through it (do not reuse passwords).

It sounds like in this case you've been phished.

Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.

cruxis

512 posts

Ultimate Geek
+1 received by user: 346

#1875490 1-Oct-2017 14:32

Ditch close the compromised accounts, Hard Reset / Format your devices. Make up new apple account and use that on your devices.

gnfb

2685 posts

Uber Geek
+1 received by user: 197

ID Verified

#1875500 1-Oct-2017 15:05

kyhwana2: It sounds like your icloud account was hacked (Usually via password reuse or easilly guessable password). If you had a PIN on your iphone, your existing PIN should work to unlock the iphone. If your macbooks are locked the only way to get it unlocked is to take it to an authorised apple repair shop with proof of purchase and get them to unlock it. To turn off lost mode: https://support.apple.com/kb/PH19299?locale=en_CA You should be able to factory reset your iphone via itunes. You need to change your iCloud password to someone decent (See https://www.cert.govt.nz/businesses-and-individuals/guides/keeping-yourself-safe-secure-online/how-to-create-a-good-password/) as the attackers probably have control of it now.

This pretty much what is happening

Is an English Man living in New Zealand. Not a writer, an Observer he says. Graham is a seasoned 'traveler" with his sometimes arrogant, but honest opinion on life. He loves the Internet!.

I have two shops online allshop.nz patchpinflag.nz
Email Me

Rikkitic

Awrrr
19062 posts

Uber Geek
+1 received by user: 16302

Lifetime subscriber

#1875501 1-Oct-2017 15:08

I don't think anyone else has said it so far so I will. You have my utmost sympathy. This is a really crappy thing to have happen. It shouldn't have to happen. I don't know if you were sloppy with your security or not. I don't know if this is somehow your fault or not. I don't know if you could have prevented it or not. But regardless of all that, it is a really lousy thing and I am sorry for you. Losing all your stuff is no joke. There might be important work there, or irreplaceable personal things, or just notes and data important to you that you will never be able to fully reconstruct. You shouldn't have to go through this. You didn't deserve it.

When you are suffering, it doesn't make you feel better to have others tell you all the things with wisdom of hindsight that you should have done. What you need now is help to repair the damage as much as possible. I wish I had that expertise but unfortunately Apple is not an area I know much about. But you have my sympathy. I hope you can find an acceptable way to fix this. Good luck.

Plesse igmore amd axxept applogies in adbance fir anu typos

gnfb

2685 posts

Uber Geek
+1 received by user: 197

ID Verified

#1875502 1-Oct-2017 15:11

so I have been spending the last few hours on th ephone to the worlds most helpful tech in melbourne

Current situation is

The imac has to be reset at Noel lemings tomorrow

The iphone is in the process of bieng wiped

fortunatly I only keep it around for my apple watch

when it is wiped and rebuilt the watches will be wiped then retattached

So although it is a several hour fix it sounds touch wood that its all fixable

Is an English Man living in New Zealand. Not a writer, an Observer he says. Graham is a seasoned 'traveler" with his sometimes arrogant, but honest opinion on life. He loves the Internet!.

I have two shops online allshop.nz patchpinflag.nz
Email Me

AliExpress

Shop now on AliExpress (affiliate link).

gnfb

2685 posts

Uber Geek
+1 received by user: 197

ID Verified

#1875503 1-Oct-2017 15:27

michaelmurfy:

Also check https://haveibeenpwned.com - if you reuse passwords then you're doing it wrong. Sign up to something like Lastpass and change all your passwords through it (do not reuse passwords).

It sounds like in this case you've been phished.

LOL so the username/email and password that is compromised is the one I used for my lastpass account that I already had

So I assume I should use a new email to sign up for account?

Is an English Man living in New Zealand. Not a writer, an Observer he says. Graham is a seasoned 'traveler" with his sometimes arrogant, but honest opinion on life. He loves the Internet!.

I have two shops online allshop.nz patchpinflag.nz
Email Me

michaelmurfy

meow
13579 posts

Uber Geek
+1 received by user: 10910

Moderator

ID Verified

Trusted

Lifetime subscriber

#1875505 1-Oct-2017 15:37

gnfb:

So I assume I should use a new email to sign up for account?

"Forgot Password"?

gehenna

8667 posts

Uber Geek
+1 received by user: 3883

Moderator

Trusted

Lifetime subscriber

#1875507 1-Oct-2017 15:44

gnfb:

LOL so the username/email and password that is compromised is the one I used for my lastpass account that I already had

So I assume I should use a new email to sign up for account?

Are you saying you had the same email address and password for both your LastPass account AND your iCloud account? If so, that's baaaaaaad. If they're the same and they got access to your LastPass, they'd have access to every account you use.

Your password management tool account/password should be completely unique from anything else you use. That's why it's the "last pass-word" that anyone should be able to get hold of.

Jax

92 posts

Master Geek
+1 received by user: 6

#1875570 1-Oct-2017 18:06

michaelmurfy:

Also check https://haveibeenpwned.com - if you reuse passwords then you're doing it wrong. Sign up to something like Lastpass and change all your passwords through it (do not reuse passwords).

It sounds like in this case you've been phished.

+1 to check the above site.

sound like this hack: https://www.macrumors.com/2017/09/20/hackers-find-my-iphone-remote-mac-lock/

(Which can bypass 2FA)

Recommend you have a hard think about where you have reused passwords and go about changing them, also enable two factor (2FA) on important account and email accounts - don't use SMS 2FA, rather use Google auth or similar. I personally use Authy for my 2FA (Google Auth compatible) which allows me 2FA app redundancy across a couple of trusted devices.
I also use LastPass which I really like.

If you really want to go into the weeds re: security (from a crypto currency angle)

https://blog.kraken.com/post/219/security-advisory-mobile-phones/

1 | 2 | 3 | 4