Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

dspdoc

macrumors 68000
Original poster
Mar 7, 2017
1,964
2,384
So for the past week, someone from Apple keeps trying to gain access to my machine. It has happened almost every single day, sometimes multiple times a day.

I am very disturbed by this to say the least.

TRYING TO VIEW MY SCREEN.png
Banners and Alerts 2019-02-01 16-17-00.png
 
Have you reached out to Apple Support recently? I chatted with them before and they used this feature to watch me produce and error I kept getting.
Not recently no. That is what is disturbing about this. I would know if I were on the phone with Apple discussing a problem. This is random.
 
Not recently no. That is what is disturbing about this. I would know if I were on the phone with Apple discussing a problem. This is random.

Do you have analytics sharing turned on? If so, maybe try turning it off. They had me turn it on when they wanted to connect to my device.

It is pretty disturbing, who knows if it’s being connected when you’re not even around. Apple’s Privacy sure is taking a beating lately.
 
Do you have analytics sharing turned on? If so, maybe try turning it off. They had me turn it on when they wanted to connect to my device.

It is pretty disturbing, who knows if it’s being connected when you’re not even around. Apple’s Privacy sure is taking a beating lately.
Analytics is already off. Yes, very creepy. Something is going on at Apple with security and privacy.
 
But, you are assuming that actually IS AppleCare...
I would suggest that you should call AppleCare, who should be able to verify that the request that you get is valid, and they should be able to give you some assistance with blocking that request, when you don't specifically want it.
(And, you would also be telling AppleCare of your suspicions about some kind of scammer, if AppleCare doesn't know anything about attempts to connect to your Mac from their end :cool: )
 
But, you are assuming that actually IS AppleCare...
I would suggest that you should call AppleCare, who should be able to verify that the request that you get is valid, and they should be able to give you some assistance with blocking that request, when you don't specifically want it.
(And, you would also be telling AppleCare of your suspicions about some kind of scammer, if AppleCare doesn't know anything about attempts to connect to your Mac from their end :cool: )
It has already been reported. If this is someone outside of Apple that would mean that they have hacked into Apple's screen sharing service. That is even more troubling than it being Apple. It would also indicate more Apple woes with security and privacy. Not good on top of the current FaceTime issue.
 
check in system preferences: in sharing, make sure screen sharing, internet sharing (etc) are unchecked. in sys pref>security & privacy, check what apps have full disk access (check here too for other settings). turn things off.

doesn't apple install an applet or something when they do screen sharing? find that... & delete it.
 
  • Like
Reactions: kazmac and DeltaMac
check in system preferences: in sharing, make sure screen sharing, internet sharing (etc) are unchecked. in sys pref>security & privacy, check what apps have full disk access (check here too for other settings). turn things off.

doesn't apple install an applet or something when they do screen sharing? find that... & delete it.
Nothing is turned on in sharing at all or full disk access. There's no applet that I can see anywhere. From what I have been told, this invitation is initiated on the Apple side using ones Apple ID. So once again, very very creepy.
 
How about EtreCheck?
What does THAT report? (EtreCheck can give you a lot of information about what you have installed on your Mac, and may give you a better clue about some items in your system that might be considered questionable
 
How about EtreCheck?
What does THAT report? (EtreCheck can give you a lot of information about what you have installed on your Mac, and may give you a better clue about some items in your system that might be considered questionable
This is a clean install of 10.14.3 there's nothing at all here to be causing this.
 
a couple of years ago, applecare ppl tried to connect to my mac, and we had to enable something in system preferences before they could connect. (shame, i can't remember exactly what that was); but it was def in sys prefs... i'd explore there if i were you.
 
You said that you reported your problem to Apple.
If you contacted AppleCare, they should help you with the process that is used for a screen connection (with the goal of turning it off)
 
So for the past week, someone from Apple keeps trying to gain access to my machine. It has happened almost every single day, sometimes multiple times a day.

I am very disturbed by this to say the least.

View attachment 819482 View attachment 819483

I’m not sure what the cause is. I’ve used Apple Support Online and I’ve used AppleCare. I’ve never received a notification resembling that one. You have to give them explicit consent to attempt a connection and the prompt asks for a numerical code that you use to authenticate.

I would suggest you change your iCloud and Machine passwords just for good measure.
 
Apple can connect with screen sharing by sending an invitation to the Apple ID you are using in the iCloud preferences of the Mac, it is the only way you will receive an invite. Do you share your Apple ID with anyone else (Work Apple ID or a family Apple ID)? Either way someone has contacted AppleCare for support and have provided that email, the advisor is trying to send a screen sharing request to that Apple ID (which so happens to be the same Apple ID you are using on your Mac). If others do not use your Apple ID I would recommend changing your password and choose "Sign out of other devices" when you complete the password reset. If you still receive the screen sharing requests it may be because someone has provided your email to Apple Support by mistake (similar email or typo). If that is the case I would recommend changing the primary email of your Apple ID.
 
Apple can connect with screen sharing by sending an invitation to the Apple ID you are using in the iCloud preferences of the Mac, it is the only way you will receive an invite. Do you share your Apple ID with anyone else (Work Apple ID or a family Apple ID)? Either way someone has contacted AppleCare for support and have provided that email, the advisor is trying to send a screen sharing request to that Apple ID (which so happens to be the same Apple ID you are using on your Mac). If others do not use your Apple ID I would recommend changing your password and choose "Sign out of other devices" when you complete the password reset. If you still receive the screen sharing requests it may be because someone has provided your email to Apple Support by mistake (similar email or typo). If that is the case I would recommend changing the primary email of your Apple ID.
It’s likely this and someone has a similar Apple ID to OP.
 
It’s likely this and someone has a similar Apple ID to OP.
There’s no way someone has a similar Apple ID as me. It happens to be my name which is very unique and I’ve been getting these invites to view my screen from Apple for a week straight sometimes twice a day.
 
There’s no way someone has a similar Apple ID as me. It happens to be my name which is very unique and I’ve been getting these invites to view my screen from Apple for a week straight sometimes twice a day.

Can you just log out of iCloud to see if it stops. It might not even have anything to do with iCloud.
 
Can you just log out of iCloud to see if it stops. It might not even have anything to do with iCloud.
This, or see if the invite persists in a temporary account or the guest account
[doublepost=1549120261][/doublepost]
There’s no way someone has a similar Apple ID as me. It happens to be my name which is very unique and I’ve been getting these invites to view my screen from Apple for a week straight sometimes twice a day.
You have a full list of all apple ids I assume?
 
This, or see if the invite persists in a temporary account or the guest account
[doublepost=1549120261][/doublepost]
You have a full list of all apple ids I assume?
My Apple ID is my full name in email form. The likelihood would be nearly impossible.
[doublepost=1549120915][/doublepost]
Can you just log out of iCloud to see if it stops. It might not even have anything to do with iCloud.
I have done this. Also a full clean install. Not sure why people are thinking this is related to my system? The invite is originating from Apple.
 
Last edited by a moderator:
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.