Phishing or real?

[jabba18]

I keep getting this pop up requesting my password.
What do you guys think? Seen it before? Apple or phishing?

 

[0128672]

I keep getting this pop up requesting my password.
What do you guys think? Seen it before? Apple or phishing?

It might help to know in which app you're being prompted to do this.

 

[jabba18]

It might help to know in which app you're being prompted to do this.

Shows up without opening any apps, when Mac OS boots.

 

[0128672]

Shows up without opening any apps, when Mac OS boots.

That seems a bit odd to me. I'd go to appleid.apple.com and change my password.

 

[chrfr]

I've had these messages from time to time- from what I can tell they do come from the operating system.

 

[jabba18]

It does seem odd, if this is from apple they did a terrible job.
Thanks for the feedback. I'll go to appleid.apple.com and change the password.
Then I'll update this thread in the future as it might be helpful to someone else.

 

[chabig]

That looks fishy to me--a strange dialog box asking you to enter your password.

 

[0128672]

And the other thing is that it's titled with Sign In With Apple ID. I don't believe macOS would prompt for that.

 

[Taz Mangus]

Download and run MalwareBytes. Also, look at what is in /Library/LaunchAgents and /Library/LaunchDaemons, see if anything looks suspicious in those folders.

 

[jabba18]

MalwareBytes finds nothing. And nothing strange in the directories either.
I'm assuming this is authentic, going to appleid.apple.com and changing the password.
If it keeps bugging I'll know something is wrong.

 

[jabba18]

Upon review my password was not changed for a long time and did not conform to the current guidelines minimum, this pop up seems to be from Apple.
That being said, just to be safe, I recommend going to appleid.apple.com to change the password instead of entering it into the pop up.