AI developer UntilHEX recently discovered a hidden cryptominer running on their machine after noticing that their Mac was consistently running hot. To diagnose the thermal issues, the developer used Claude Code to build a monitoring application and check the accuracy of the system temperature sensor. During this diagnostic process, Claude uncovered unauthorized software operating in the background, specifically identifying a cryptominer that the user never installed.
The unauthorized cryptominer caused severe system strain, driving processor usage up to 1,175 percent and pushing core temperatures to 112 degrees Celsius, which equals 233.6 degrees Fahrenheit. Modern operating systems measure processor load across multiple cores, allowing aggregate percentages to exceed 100 percent under heavy computational loads. Using its diagnostic capabilities, Claude traced the malicious software directly to a LaunchAgents directory that existed on the system prior to the developer building their own application.
While the origin of the malware remains uncertain, Claude offered to mitigate the issue by quarantining the unauthorized files into a separate folder. Because the AI assistant lacked administrative permissions for certain protected areas of the macOS file system, the developer manually removed the remaining component. A subsequent security audit conducted with a third-party application confirmed the complete removal of the threat, allowing the Mac to return to normal operating temperatures.
How to protect yourself from malware
Cryptominer infections and similar threats require proactive monitoring, especially for users deploying autonomous AI tools with broad system access. Individuals running active AI agents should monitor hardware vitals through the built-in Activity Monitor and supervise agent activity closely during unattended operations. For the general user base, the most effective defense against unauthorized software involves strictly downloading applications from trusted sources such as the official Mac App Store or directly from verified developer websites.
Avoiding cracked software and pirated applications significantly reduces the risk of accidental malware exposure. Users must also exercise caution with unsolicited digital communications by refraining from clicking links found in unexpected emails or text messages. Verifying sender addresses and inspecting underlying URLs before navigation helps prevent social engineering attacks and unauthorized software downloads across macOS environments.
