Also, don't forget to enable two-factor authentication if it's not already active on your account. Generate a new one using various of the tools at your disposal and keep it somewhere safe. The second thing you need to do to protect your iCloud account, and therefore your iPhone or Mac, is to immediately change your Apple ID password. On your Mac, you can disable Find My Mac from the iCloud panel in System Preferences. What to do? Well, for starters you can quickly disable the Find My iPhone feature by going into Settings, press on your name if you're running iOS 11, then access the iCloud settings and turn off Find My iPhone. Change your passwords now and also disable Find My iPhone The bad thing about all this is that it doesn't matter if you have two-factor authentication enabled or not, because the hackers simply click on the "Find My iPhone" functionality that's available on the website to remotely lock the device, bypassing two-factor authentication. I suspect that if someone was not using the helper before, changing the configuration to use the helper, it would see that a password had not been entered for that remote, it would prompt, and everything would be fine the first time.
And now, those who got their hands on these credentials can sign into your iCloud account to remotely lock your Mac or iPhone using Find My iPhone. user2782001 I was using the osxkeychain helper, running the mac command did nothing.
How did this happen? Well, blame it on the Equifax hack or another recent data breach that exposed the passwords and email addresses of millions of users.
HOW TO CHANGE MAC PASSWORD REMOTELY CODE
Several Mac users have reported this week, via their Twitter accounts, that their Macs have been locked out and all they see it's the lock screen with a message asking them to pay a certain amount of money in Bitcoin if they want to receive the code to unlock the device. According to MacRumors, it would appear that hackers have started remotely locking Mac and iPhone devices using iCloud's "Find My iPhone" feature, demanding ransom payments.