Apple Users Beware: 'Copy-Paste' Scam Can Grant Mac Access
A 'copy-paste' scam is exploiting Mac's Terminal app to gain unauthorized access to users' data and control their devices remotely.
Apple computer users are being targeted by an escalating scam known as the 'copy-paste' scam. This tactic can allow malicious actors to gain control of a user's Mac, potentially leading to data theft or unauthorized remote access.
The scam leverages the Mac's Terminal application, a powerful command-line interface typically used by advanced users. Scammers trick individuals into copying and pasting a specific command into Terminal, which can then install malware, grant remote access, or lock the user out of their system until a ransom is paid.
Apple has introduced safeguards to mitigate this threat. The 'copy-paste' scam does not exploit inherent security vulnerabilities in macOS but rather relies on social engineering and user deception to trick individuals into executing harmful commands.
Victims may be induced to run the command through various channels, including emails, text messages, online forum posts, or deceptive webpages disguised as troubleshooting guides. The threat can also extend to AI chatbots that might inadvertently spread malicious commands through indirect prompt injection.