A newly discovered software bug in macOS is letting hackers remotely take over computers without needing a password. The security flaw targets the built-in screen sharing tool, allowing attackers to gain full root access to vulnerable devices.
Now, reports confirm that bad actors are actively abusing this weakness on systems exposed to the internet to secretly install software that mines cryptocurrency.
Attackers bypass passwords to install hidden cryptocurrency mining software
The issue sits in the native remote control features of the operating system. If you leave your Mac with its screen sharing port open to the web, anyone can connect and bypass the login screen entirely. Hackers simply need to guess or know a username to get inside.
Don’t miss the best of The Mac Observer
Set us as a preferred source and our Apple reporting ranks higher in your Google Search results and Discover feed — one tap, no account changes.
Cybersecurity experts report that criminal groups are scanning the internet for accessible computers. Once attackers break in, they set up background tools to mine Monero, a type of digital currency. While mining slows down your machine and uses extra electricity, people with this level of access could also steal files or drop worse types of malware.
Apple pushes software updates to block unauthorized screen sharing access
Apple officially patched this problem earlier in the month. The update fixes how the system checks login details. The tech giant released these software fixes for macOS Tahoe, Sequoia, and Sonoma.
If you use remote access features for work or personal use, you should update your system right away. You can read more details online about how it fixed a serious screen sharing vulnerability in recent security notes.
If you cannot update right now, you should simply turn off the remote viewing feature in your system settings. Go to your general settings, click on sharing, and toggle the tool off.
Keeping your software updated and closing unnecessary internet ports remains the best way to keep hackers out of your machine.
Discussion