Post

I did not have a post about almost downloading malware / a virus on my top viral tweets bingo card, but here we are.

“To access this website, please confirm you have destroyed your computer first.”

I mean, a bot can't ctrl C win R ctrl V right?

But the Nigerian prince instructing me to do it seemed so trustworthy...

@cloudflare.social check out this thread

That's more a "security through obscurity" defense. The point is tricking the user into running a random script on their computer, and that can be done on any OS.

saw a yt vid about something exactly like this. turned out to be a RAT (remote access trojan) so unless you want some rando in fuckin Singapore or whatever to have total access to your pc, I would advise against this.

Win+R notepad [enter] Ctrl+V then do a whois for the download link to report to their provider.

S/are/is/

This wouldn’t work if cloudflare didn’t splash their advertising page before half the websites on the internet

I was on YouTube yesterday and had a "YOUR PDF FILES ARE DOOMED IF YOU DON'T CLICK AND DOWNLOAD THIS RANDOM BS IMMEDIATELY"..... Yeah... no dog, ain't happening.

I've heard about these, not from Cloudflare. Damn this could get a lot of people without question.

It installs stealer malware

Yup, I did.

I got this yesterday too & like you didn't do it. Later, the website was fine so someone must have alerted them.

I totally missed that once, i pray that my absent minded ass was right thinking it's safe if it calls to an actual cloudflare url, the fact that this kind of "verification" is completely unprecedented should've already been a red flag for me but I think I was too distracted to care

I mean I hate windows and I agree that it's mostly malware this days but all major operating systems are vulnerable to this style of phishing.

This would be an actually useful application for agentic AI, but we don't have that.

It's exhausting. Rather than raiding scammer operations with corrupt cops, just drop a fucking JDAM through the roof and call it a day. Eventually they'd get the message.

UAC did everything possible to hide the incident in Phobos and were directly responsible for the invasion of earth by the hell hordes, why would they warn anyone about a computer virus?

The Internet never changes huh?

They're called ClickFix attacks & would be insanely effective in the right environments. Another reason to never use administrator accounts for day to day browsing on Windows.

Reminds me of a simmilar case in tiktok about how to install free apps, and it wants you to open powershell and run a peice of code. Guess what happens next, cuz free apps is not it

The familiar logo is what makes this convincing. A human-verification check should never ask you to open Windows Run and execute something from your clipboard. That change from clicking in a browser to running a command is the warning sign to remember.

Every text, email and message should be looked at as you would that cheap Chinese restaurant's kung Pao chicken Ask yourself, "is that chicken?"

😳 👏👏👏

100% real. And I almost made myself a victim. I can't imagine how many other people have told themselves it makes sense.

Tell the local establishment that their website has been hacked

Jfc NO.

Is that *actually* cloudflare?

How did the "command" get into the clipboard?

I mean how would you do this in Linux 🤔🙄😁🤣