Security · 17h ago
Fake captcha tricks users into running malicious PowerShell script
A fake Google captcha on Crooked Timber prompts users to press Win+R and Ctrl+V to run a clipboard command. The command launches PowerShell to download a script from fine-work-team.com. The scam exploits social engineering to bypass browser security.
Meridian48 take
This attack is a reminder that captchas are not security checks—users should never run commands from web pages.
Read the full reporting
Ask HN: Crooked Timber showed showed me a virus captcha, What now? →
Hacker News
social-engineeringmalware