Skip to main content
3 of 4
Mentioned remote view.
Graham Miln
  • 44.6k
  • 8
  • 94
  • 127

It is unlikely you have been hacked. A process on your Mac is likely trying to verify your Apple ID with Apple's Sign On services.

  • AK = AuthKit
  • AS = Authentication Services

Private AuthKitUI Framework

AKAuthorization appears to be part of Apple's private AuthKitUI framework. This framework is stored at /System/Library/PrivateFrameworks/AuthKitUI.framework on macOS.

The public Authentication Services likely uses AuthKitUI to provide the user interface:

Use the Authentication Services framework to improve the experience of users when they enter credentials to establish their identity.

  • Give users the ability to sign into your services with their Apple ID.
  • ...

It is likely AKAuthorizationRemoteViewService is a user element that shows content provided by a remote service.

See jujigo / DragonBuild source that mentions this framework's contents.

Given AuthKit (AK) is a System Programming Interface (SPI) – and thus private to Apple's engineers – only Apple can authoritatively answer this question. You should provide feedback to Apple about this behaviour.

Graham Miln
  • 44.6k
  • 8
  • 94
  • 127