Forums
New posts
Articles
Product Reviews
Policies
FAQ
Log in
Register
What's new
Search
Search
Search titles only
By:
New posts
Menu
Log in
Register
Install the app
Install
Forums
Apple Computing Products:
macOS - Notebook Hardware
Suspicious Terminal Activity
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Reply to thread
Message
<blockquote data-quote="Sparrow5" data-source="post: 1718246" data-attributes="member: 378041"><p>I never use the Terminal on my Macbook Pro. However, yesterday I opened it and noticed it said the Last Login was June 23rd. I find this odd since I hadn't logged into the Terminal in a very long time. How is it possible that it said my last login was on June 23rd?</p><p></p><p> </p><p>I also entered the command</p><p></p><p></p><p>open .bash_history</p><p></p><p>cat .bash_history</p><p></p><p></p><p>to check the history of commands entered into the terminal. This is what came back:</p><p></p><p> </p><p></p><p>uptime</p><p></p><p>pmset -g custom</p><p></p><p>defaults read ~/.MacOSX/environment DYLD_INSERT_LIBRARIES</p><p></p><p>defaults read /Applications/Safari.app/Contents/Info LSEnvironment</p><p></p><p>defaults read /Applications/Firefox.app/Contents/Info LSEnvironment</p><p></p><p> </p><p>I never entered any of these commands</p><p></p><p>Can someone help to explain what's going on? Could it possibly be a glitch or a Macbook Pro process that I'm unfamiliar with? Also, in terms of the Terminal Command history, is there an automated process that could've entered the commands without my logging in? Or is this an indication of a compromised machine?</p><p></p><p>Last, is there a way to reveal the dates in which the Terminal commands were entered?</p><p></p><p>Thanks for your help</p></blockquote><p></p>
[QUOTE="Sparrow5, post: 1718246, member: 378041"] I never use the Terminal on my Macbook Pro. However, yesterday I opened it and noticed it said the Last Login was June 23rd. I find this odd since I hadn't logged into the Terminal in a very long time. How is it possible that it said my last login was on June 23rd? I also entered the command open .bash_history cat .bash_history to check the history of commands entered into the terminal. This is what came back: uptime pmset -g custom defaults read ~/.MacOSX/environment DYLD_INSERT_LIBRARIES defaults read /Applications/Safari.app/Contents/Info LSEnvironment defaults read /Applications/Firefox.app/Contents/Info LSEnvironment I never entered any of these commands Can someone help to explain what's going on? Could it possibly be a glitch or a Macbook Pro process that I'm unfamiliar with? Also, in terms of the Terminal Command history, is there an automated process that could've entered the commands without my logging in? Or is this an indication of a compromised machine? Last, is there a way to reveal the dates in which the Terminal commands were entered? Thanks for your help [/QUOTE]
Verification
Post reply
Forums
Apple Computing Products:
macOS - Notebook Hardware
Suspicious Terminal Activity
Top