What to do when ransomware strikes your Mac<article>
<section class="page">
<p>When ransomeware strikes, it's hard not to panic. A ransomeware attack may cause your Mac to shut down and then restart into a lock screen. A message appears, demanding ransom to provide a six-digit unlock code, which can’t be bypassed. This can occur even with two-factor authentication enabled.</p><p>Crackers appear to be making use of passwords from other sites that have had password breaches in the past—and iCloud accountholders re-use those passwords with their iCloud account. With Find My Mac enabled and your password, a criminal can log into iCloud.com and use Find My Mac (even without confirming with a second factor) to put your Mac into Lock mode with a six-digit code they create. Lock mode restarts a Mac into Recovery and locks out a normal boot.</p><p class="jumpTag"><a href="/article/3229511/security/what-to-do-when-ransomware-strikes-your-mac.html#jump">To read this article in full or to leave a comment, please click here[/url]</p></section></article>
Source:
What to do when ransomware strikes your Mac