Attackers Exploit macOS Screen Sharing Flaw to Hijack Macs for Crypto Mining

The Dutch national cyber agency has reported that hackers are actively exploiting a serious vulnerability in Apple's built-in Screen Sharing remote desktop feature. The flaw allows attackers to take control of Mac computers that are exposed to the internet, turning compromised machines into tools for cryptocurrency mining without the owner's knowledge.

Once hijacked, these Macs are used to mine Monero (XMR), a privacy-focused cryptocurrency favoured by cybercriminals because it is harder to trace than Bitcoin. This type of attack, known as cryptojacking, can slow down affected computers, increase electricity costs, and shorten hardware lifespan, all while generating profit for the attackers.

While the attack specifically targets macOS systems with internet-facing remote access enabled, it serves as a reminder that any device exposed to the internet without proper safeguards can become a target. Businesses using Mac computers for remote work or remote administration should review their exposure and apply available security updates promptly.