WHAT'S HAPPENING?
Apple users have reported their OS X and iOS devices have been locked without their knowledge and ransom requested to unlock.


WHEN IS IT HAPPENING?
Initial reports on September 16, 2017, and ongoing.


WHY IS IT HAPPENING?
Access to Apple’s iCloud “Find My iPhone/Mac” service is allowed without requiring two-factor authentication even if two-factor authentication is enabled.  Criminals are exploiting this functionality to lock users’ devices and are then requesting a cryptocurrency ransom for the unlock code.  More information can be found at the following sites:

https://www.macrumors.com/2017/09/20/hackers-find-my-iphone-remote-mac-lock/
http://wccftech.com/apple-icloud-ransomware-campaign/


WHO IS AFFECTED?
Users of Apple’s iCloud service.


WHAT DO YOU NEED TO DO?
It is highly recommended to disable the “Find My iPhone/Mac” service on iCloud until Apple releases a fix.  It is also highly recommended to update your iCloud password.


WHO SHOULD YOU CONTACT FOR QUESTIONS?
Feel free to contact the TSO Help Desk (CCB 148, 404.894.7065, helpdesk@cc.gatech.edu).  If you prefer, you may contact the OIT Technology Support Center (404-894-7173, support@oit.gatech.edu).