Change Your Apple ID Now: Hackers Locking Macs Remotely

Hackers are remotely locking Macs using an Apple ID and password, even with two-factor authentication enabled. Anyone who reuses a password as an Apple ID password and another password should change their Apple ID password immediately.

Over the past week and an increase in the last 24 hours, multiple reports have emerged from users of remotely locked Macs, even with two-factor authentication enabled. Hackers seem to use Find My iPhone services to see a list of Macs and lock them with a passcode. Currently, you don’t need two-factor authentication to log into Find My iPhone and put a lock on a device.

When locked out, users see a request to send the equivalent of $50 bitcoin to an address, and then the hacker shares the six-digit code needed to unlock the Mac. Apple is working with some users who are dealing with the issue. You can see some of the reports below.

My MacBook was hacked and locked via iCloud. I have to swear very loudly. https://t.co/8gV10g84Vp

— Daryn Egan-Simon (@darynsimon) September 18, 2017

So, this morning, while I was sleeping, a hacker (despite two-factor authentication) gained access to my iCloud account.

— Jason Caffoe (@jcaffoe) September 20, 2017

MY MACBOOK JUST LOCKED ITSELF. WHAT HAPPEN.

— Riza 2.0 (@verysmolsnek) September 20, 2017

Y’all my MacBook is locked and hacked. someone help me @apple @AppleSupport pic.twitter.com/BE110TMgSv

– Uncle Rico (@bunandsomesauce) September 16, 2017

If you’ve reused your Apple ID password on another website, now is a great time to change your password. It doesn’t seem like the Apple servers have been hacked at this point, but if you’ve used that password elsewhere, just try the right combination in the Find My iPhone tool.

apple outlines How to change your Apple ID password on a computer or on your iPhone or iPad. Now is the time to use Safari passwords, Lastpass, 1Password or any other tool to generate a secure Apple ID password.