Question

How to find out if your Mac has been hacked

Answer 1

If it has any AV software remove it then go to applications, utilities, and double click terminal. Type sudo -l in the terminal command window. Press enter then type in your password and press enter again. List all accounts existing on your Mac by typing dscl . list /users into the terminal and press enter. Your Mac will list all existing accounts on the computer. Check whether any account has been created without your permission by verifying that all accounts in the output of dscl have been created legitimately. If there are additional accounts, they probably have been created by a hacker. Check whether an account has been misused by typing last into the terminal and press enter. For each account your Mac will list the time and date of the last login to all existing accounts. If the most recent login to any of the accounts happened at an abnormal time that you dont know about, it probably was done by a hacker posing as a legitimate user on your computer.