I just had a hacking attempt. First one ever using Linux (years). It identified my machine as a Microsoft and warned me not to try shutting down the computer and rebooting. I lost control of the mouse so I forced a shut down with On/Off button.
Anyone else have this experience? I'm told the software is up to date. Seems to be working OK now.
If you were hacked, then the system is most likely not OK. The first step any attacker would take is set up a permanent foothold on your machine so that they can come back at any point later on. Advertising the fact that you got hacked with big messages that make no sense is a sure way of losing the advantage. Either that, or you really just got hacked by some kid who's having some fun.
However, based on the information given, I wouldn't call it just yet. What does it mean that it identified your machine as a Microsoft? How or where did you see that? In what context? If you downloaded some kind of malware that aims to Windows machines, it will most likely not work on Linux.
But the sure way of putting this to an end is to re-install Zorin OS from scratch, in case you just want to play it safe. Unfortunately you will lose your data in the drive... and this is where I would normally tell you to make backups of that, but if you have indeed been hacked, you don't want to copy files over to other devices.
I would also be curious to know what "It identified my machine as a Microsoft" means. Was this a browser indicating this? Another program? A system menu prompt that appeared? This sounds very odd, I agree on that.
Sounds like a browser popup scam.
Best solution is to flush your browser and then install adblocker extension.
It was a Microsoft page, looked like a Microsoft machine with several open windows (CPU usage, Malware has taken over your machine flags), I didn't study it, I smashed the off button as soon as the disembodied voice of the bug says "Do not reboot! That will only make it worse." For the second it lasted, it was impressive. So, Zorin 16.3 is still being supported, yes?
I have two adbloc extensions running. I just added another.
I second @zenzen's analysis on this. It was just a phishing page. It had no idea you were on GnuLinux. You are safe.
The question now is: how did you get to that "Microsoft page"? What were you doing that led you there? Did you click on any links, perhaps on an email? Keep in mind that even emails from people you know and trust may have forward this to you, perhaps without their knowledge.
From recollection 16.3 is based off Ubuntu 20.04 LTS which means you are OK until April this year. I understand Team Zorin are expected to release 17.3 any moment, so I would backup your critical data and download 17.3 to a USB using Ventoy.
Should the USB stick be formatted with a partition so the Ventoy goes on one side and the image of 17.3 on the other or do you just load one over the other?
Ventoy does this for you. When you create Ventoy on your USB it automatically creates a small partition for the program with the second one for you to drag and drop your isos too. When you mount the Ventoy USB you will only see the empty partition to drop your iso into.
