MacBook hacked, left unattended, came back bag was opened [closed]
I left my MacBook (which was turned off) in the car in my laptop case, and the case was closed. I came back to the car, and the case was open.
There was only enough time for a usb device to be put in. I checked my logs when I got home, maybe 2-3 mins after that. I opened the computer and opened the logs right away. I noticed something unusual. This:
2025-02-17 12:20:11.791688 (gui/501/com.newtechnologies.MaCleaner.Launcher) <Notice>: cannot spawn: service is throttled
after this I saw this I tried to open Macleaner, which is a program I downloaded. before. I scrolled up, and noticed the computer was active for a whole 3 minutes previously, meanwhile ** I didn't open my computer after 10:55am**. I am going to copy and paste it, but I can also provide the log file that I saved from that day if needed.
Also, certain things that were in the logs like tonelibrarylyd, which is used in things like Arduino https://www.arduinolibraries.info/libraries/tone-library. Or DataDirectorRemoteScanner, which I don't know what it is used for or SandboxHelper.
I tried to copy and paste the whole thing but I couldn't (it said sp@m detected.) I have the logs
Basically there are some processes like remote window viewer. altogether it looks like someone remote accessed my computer using a arduino box, that is attached to a usb, and has access now. Don't know what to do, at the time the images aren't showing up, let me know if they don't show up when you view this.
Please Help
2025-02-17 10:55:45.769662 (gui/501 [100005]) : failed lookup: name = com.duckduckgo.mobile.ios.DBP.backgroundAgent, requestor = DuckDuckGo[3283], error = 3: No such process
2025-02-17 12:17:22.047793 (system/com.apple.newsyslog) : internal event: WILL_SPAWN, code = 0
2025-02-17 12:17:22.235728 ...025-02-17 12:17:22.235728 (pid/390/com.apple.ScreenTimeWidgetApplication.ScreenTimeWidgetExtension [417]) : extension already interrupted clean exit attempt
2025-02-17 12:17:22.473335 (user/501/com.apple.tonelibraryd) : internal event: WILL_SPAWN, code = 0
2025-02-17 12:17:22.473375 (user/501/com.apple.tonelibraryd) : service state: spawn scheduled
2025-02-17 12:17:22.473378 (user/501/com.apple.tonelibraryd) : service state: spawning
2025-02-17 12:17:22.473470 (user/501/com.apple.tonelibraryd) : launching: ipc (mach)
2025-02-17 12:17:22.473998 (user/501/com.apple.tonelibraryd [5597]) : xpcproxy spawned with pid 5597
logs are here in google docs
