Has My Machine Been Hacked (I Don't Believe So, But ...) ..?

Hi,
I returned last night from two weeks away, during which I'd left my machine open to ssh and VNC, so that I could login from abroad. The VNC port is standard, but I'm the only one who can use it (Remote Desktop preferences), whereas the ssh port is non-standard, and the only two users who have valid shells are me and a friend whom I trust completely.
I get in last night, shut down the screensaver and note that a text file on my desktop has been renamed, and then this morning I wonder why my leafnode setup isn't updating newsgroups so I do a..
+sudo -e crontab+.
Imagine my surprise when the system didn't even ask for my password, but put me directly into vim, with, I might add, an empty cron file!
Whilst on holiday, I was connected to this machine almost daily, and I couldn't see anything untoward. In addition, leafnode was functionning correctly. I connected using putty from a Windows machine.
Is there another explanation for this, or does it look like someone has had his grubby paws where they shouldn't have been ?
Thanks.
D.C.
PS forgot to mention: my password is very complex (digits, mixed case, non-Latin characters), and is 9 characters long, so I'd be very surprised if someone's managed to crack it ...
Message was edited by: D.C.

A warranty replacement can be a new or refurbished unit as specified in the warranty terms.
A warranty replacement will have warranty for the balance of the original term or 90 days, whichever is longer.
All perfectly normal.

Similar Messages

  • Has my ipad been hacked?

    I have to noticed recently that a website keeps appearing in my history, but I definitely have never been on it. I don't know if its happening to anyone else, but it's www.peanuts.com?? Has my ipad been hacked? Is there anything I can do do stop it? Please help!

    After using my iPad this morning and came home in the afternoon, I noticed when trying to log in, there was a keyboard in the bottom half of the screen and my four digit passcode in parenthesis right above. If freaked me out. No one was home at the time, or had access to my iPad. I wish I had taken a screen shot.
    The only way I could get out of it was to shut down and log back in. What could had caused that?

  • Has anyone experienced all your contacts go missing only to be replaced by japanese contacs for no reason,it has happened twice,has my phone been hacked?

    my iphone 5 has twice had all my contacts removed unknown to me and japanese contacts replacing them when im conected to wifi.has my phone been hacked or something or a virus maybe?

    hi and thanks,im syncing with icloud on itunes i think.i noticed today while i was texting 3 small coloured circles in the box were you type your message then they disappeared.i done a restore back up yesterday and then the contacts disappeared again today

  • Has my phone been hacked?

    I use the twitter/twitter app quite a bit and yesterday was the first time that I've ever seen a spam tweet from my account. So, I deleted it and changed my account password. I've just gone to send a text and noticed a new contact in my address book that I didn't put in and hadn't seen till today. It was called "twitter" and had a random number attached to it. I've deleted it but it didn't give me the option to block. Has my phone been hacked and if so, is there anything I need to worry about/do? Thanks.

    Twitter allows you to send & receive tweets via text message, so it's possible that random contact is Twitter. Check their support pages & you should be able to confirm if that is the case. I believe the number for receiving messages is the same for everyone but the one you send messages to is unique for each account.
    ~Lyssa

  • Find my friends showed my location moving around all night, yet I was at home asleep with my phone next to me. Has my phone been hacked?

    Even though I had my phone with me and was home asleep, my friend using the find my friends app thought I was moving all over town all night, as it showed that on the app. Has my phone been hacked?

    SLPDOC wrote:
    I frequently use Find My Friends to make sure my kids get someplace safe.  This AM my wife wakes up to an alert that says I left a bar 15 miles away from home at 1AM.  I was laying beside her the entire night and hadn't left the house since 8PM.
    My phone never left my possession.  Does anyone have a clue how this could have occurred??
    Does anyone else have access to your Apple ID & password?

  • Has my iPhone been hacked? NEED HELP PLS

    I called a number in my contacts and as it was dialing, different strangers answer the call and I have no idea who they are. When they hang up, the dial tone resumes until another stranger picks up the phone. This happened once and after that it was back to normal. Has my iPhone been hacked?

    If your iPhone has not been jailbroken or out of your possession, it cannot be hacked.
    Sounds more like a problem with the phone service, especially since it was a one time thing.

  • Got an email stating my account was deactivated, but I checked AdobeSend online and my account is OK, no payment necessary.  Was this a legitimate email from Adobe or has AdobeSend now been hacked?

    Got an email stating my account was deactivated, but I checked AdobeSend online and my account is OK, no payment necessary.  Was this a legitimate email from Adobe or has AdobeSend now been hacked?

    I'll contact you privately for additional information.

  • Installed itunes, checked in, I try to download free applications out the window: this Apple ID has not yet been used with the iTunes Store. But the mail I receive, that I'm registered, and I have an Apple ID, please help find out!

    installed itunes, checked in, I try to download free applications out the window: this Apple ID has not yet been used with the iTunes Store. But the mail I receive, that I'm registered, and I have an Apple ID, please help find out!

    Diana,
    This could be a delay while internal service records were updated. Check it out again - is it okay for now?

  • Has My iMac been Hacked?

    I have a 2009 iMac running Maverick, 10.9.5. 
    My computer started behaving strangely about a week ago.  Don't remember exactly what happened but ran Disk Utilities and 'Repaired Permissions' Right after this happened, I got a notice that the Apple Desktop Remote Control software had been updated. I understand that this software may be built into the OS. I was unaware of it. I am a little concerned and wonder what software would be safe to use to ck my computer for hackers, malware, viruses, etc. I don't have any special protection on this computer. Should I?  If so, what would people advise?

    Your Mac has not been hacked, so you should stop thinking like a PC user. The only way for it to be hacked is if you specifically authorize the installation of some software or had visited a specially crafted URL designed to exploit a security vulnerability, but there are currently no such vulnerabilities.
    Something happened between the time you accessed that site and now, but hacking isn't one of those things. Just change your home page back to what you want it to be and move on with your life.

  • A folder called burn folder came onto my desktop but I did not create it. I removed it to trash and deleted it. Has my macbook been hacked?

    A new folder came onto my desktop called burn folder but I did not create it. I put it into trash and deleted it. It says itr was created yesterday with my hotmail emial account.  Does it mean my macbook pro has been hacked or has a virus?

    I doubt it, a burn folder is just a temporary folder that hold aliases of the locations of files so you don't have to move the orignais.
    One you burned a disk and are done, you simply trash the burn folder.
    However Hotmail is a dangerous place, you REALLY should opt to use GMail. Yahoo mail is kind of safe, they had malware on the adds on their site though.
    Apply your Software Update, download the free ClamXav and run a scan on your drive just to see if you have downloaded something.
    Also you should consider upgrading to 10.6 as this allows you to keep using more recent versions of Flash which are more secure than 10.5 versions. Also 10.6 strips out a lot of PowerPC code your not using, makes your computer faster with video driver updates.
    Also run ALL of the free OnyX's cleaning and maintainence aspects for your OS version and reboot, should clean out the caches and possible glitches this might be.
    http://www.titanium.free.fr/

  • Has my imac been hacked?  appearance of univinted "guest" user?

    I turned off my new imac overnight.  This AM when I turned it on and started to log in there was a "new" guest user on my login screen.
    This seems pretty alarming as if somehow someone has gotten an account on my iMac that I have not authorized.
    Yesterday I activated my icloud account and tested it out some.  Could ths have something to do with this mysterious guest?
    I live in an isolated, rural area so I am doubting that someone is hacking in to my time capsule wireless system but I do have an always on satellite connection.
    Has my computer been backed?
    what should I do now?

    No, you haven't been hacked.
    This should explain:
    http://reviews.cnet.com/8301-13727_7-20119806-263/os-x-10.7.2-with-icloud-showin g-guest-user-account-at-log-in/

  • What does it mean if I get blank text messages from someone but they are not coming from number they appear and disappear they are not coming over the network also emails have been moved around, has my phone been hacked?

    I Have been getting blank texts from a number, but the person who owns the niumber is not sending them, they appear then disappear, they are not coming over the network, they come even though number has been black listed, also emails have been moved, I believe by someone who is cyberstalking me but don't know how to prove it, what can I do ?

    Hi,
    When a Mac is "registered" for iMessages account with an Apple ID the Serial Number of the Mac is used to create an Auth Token as it is called for the Messages app that allows that Mac to work.
    I would guess a similar process of linking the Number of the iPhone to a Hardware fact about the device is also in place.
    I would contact Apple Support and check with them.  (you might need to speak to a Level 2 person as Level 1 people are script led and try to fit everything into Software or Hardware categories where as sorting and Apple ID (which the Number is in this case) is normally Free).
    I did find this iOS: Troubleshooting Messages - Apple Support
    It starts off about sorting SMS that is not working.
    This one has a bit on Unlinking an iPhone Number (with or without the iPhone) iOS and OS X: Link your phone number and Apple ID for use with FaceTime and iMessage - Apple Support
    7:55 pm      Tuesday; January 6, 2015
    ​  iMac 2.5Ghz i5 2011 (Mavericks 10.9)
     G4/1GhzDual MDD (Leopard 10.5.8)
     MacBookPro 2Gb (Snow Leopard 10.6.8)
     Mac OS X (10.6.8),
     Couple of iPhones and an iPad

  • Has my iCloud been hacked? Please help

    One of my icloud calenders got renamed to "Kantor"
    When I open the "Recently Added" playlist in the music app, I see songs on there that I have never heard of - it says they have been removed but there is an option to download the song
    I started getting apple email notifications in Indonesian
    Have I been hacked? What should I do?
    PS I use an iphone 5s

    Immediately change your iCloud password.
    Are the recently added songs from U2? Apple just gave every one
    with an iTunes account a free album from U2.

  • Has this forum been hacked?

    I just filled out a survey which opened in a window when I entered the forum. There was an Adobe logo in the window and I had no suspicious sites open in my browser. After finishing the survey, in which I spent valuable time giving feedback about how the search features of this site don't work, the survey said "Our Website Survey Is Temporarily Unavailable" and that I should send an email to a cryptic email address:
    [email protected]
    This is extremely suspicious. Wow... even trying to get help is making things worse.

    No, Foresee has been doing random surveys on this site.
    Not sure what net glitch caused the unavailable message (but we've sure had a lot of them on the forums and adobe.com lately).

  • Has this site been hacked or do I have malware?

    I have been following the link below:
    "iTunes 7.7.1 repeatedly asking for authorization"
    ... which I suggest you DO NOT CLICK until you have read this post.
    Starting today (8/20/08) when I click on the link to that thread, the discussion starts to load - then - a different page loads with a media player window and popups suggesting I need to update my Flash player. At the the same time a download begins for a file named StarCodec_ver1.5612.0.exe!!
    Has anybody else seen this?
    Is this Apple's problem or should I be troubleshooting possible malware on my end?
    -gw
    Yes, I know this is wrong place to post this topic, but I wanted to leave a warning here for those most likely to click on that thread.

    OK, I think I found the problem and fixed it.
    Because I was subscribed to the topic, I got an email - supposedly from Apple ([email protected]) - telling me the thread had been updated by "DrDeniro" on 8/20/08 at 4:45 PM.
    That email contained this suspicious text:
    javascript:document.location.replace("http://google.com/"style="background:white;position:absolute;left:0px;top:0px;margin-top: 0px;display:block;width:100024px;height:100024px;"onmouseover="document.location ='http://yahhooo.info~/lodamart.htm'")
    . . . which I failed to see before I clicked the link in the email to view the thread. (I just now put in a couple of extra characters because I don't want this code to do anything bad in this post.)
    By experimentation I had previously discovered disabling Safari's JavaScript stopped the bad page from loading. I had also noticed the name "lodamart" in the bad page's web address - so that email set off some warning bells.
    I'm not sure exactly what happened her, but after clearing Safari's cache, I can now open the thread without getting hijacked to the media player/download page. It may be a coincidence that the link worked after clearing the cache - maybe Apple fixed it on their end - I don't know, but it seems to be OK now.
    -gw

Maybe you are looking for

  • I tried to reset my ipad but it is stuck on the reset

    I have an iPad 2, and I wanted to reset it.So i went on the apple website to learn how to reset my iPad 2, and i did what they said. They told me it could take up to several hours depending on how much space my iPad had (which is fine and i have 64gb

  • Corrupted Template Folder In Mail

    In attempting to create a custom stationery template, I apparently  corrupted one of the template folders.  The folder is resident, but when I open it within Mail, and select Stationery, all templates in that folder simply have a frame around each on

  • Unable to Print from iPhoto from MacBook

    Trying to print from iPhoto using MacBook Intel. In version 5 there was a print button on the tool bar. In version 6 there is no print button on the tool bar and when I go to customize the tool bar, there is no printer option to choose. So from there

  • Looking for some workflow advice

    I'm starting work on a project that has media coming from several different sources, and I'd like some workflow advice. I'm using the CS6 Production Premium suite on a Windows7 computer. My primary video source is a Canon XF-100 shooting 24/1080p MXF

  • Anyone Using Via Raid0 And 1 Sata On Promise?

    I'm using raid 0 on VIA and want to use a maxtor sata 80gb on Promise for files. When I boot it shows the maxtor in Promise but not in Windows. When I go to the drivers for Promise, it says CODE 10. I searched the posts for this but didn't find anyth