this post was submitted on 06 Apr 2025
401 points (99.0% liked)

PC Master Race

16324 readers
222 users here now

A community for PC Master Race.

Rules:

  1. No bigotry: Including racism, sexism, homophobia, transphobia, or xenophobia. Code of Conduct.
  2. Be respectful. Everyone should feel welcome here.
  3. No NSFW content.
  4. No Ads / Spamming.
  5. Be thoughtful and helpful: even with ‘stupid’ questions. The world won’t be made better or worse by snarky comments schooling naive newcomers on Lemmy.

Notes:

founded 2 years ago
MODERATORS
 

I just saw this and felt I should share it. I'm sure most people here wouldn't fall for it but it can't hurt to make sure 👍

Edit: I just wanted to add, I have no idea what this tried to copy. I'm using Firefox on Linux which is perhaps why it didn't make it to my clipboard 🤷

you are viewing a single comment's thread
view the rest of the comments
[–] joshcodes@programming.dev 15 points 23 hours ago

Oooo I'm researching this. We call some of them click fix and others clearfake but theyre all fake captcha. Its either from vulnerable wordpress themes or plugins so update ya sites for the love of Torvalds.

They're basically a method for infostealers to get downloaded onto the device. They're kinda nasty and some lead to ransomware if youre really unlucky. The usual payload is intended to leach off an individual and steal passwords, crypto addresses, etc, but as soon as they find out you're an organisation computer, they use your machine for initial access and potential further compromise.

Most people don't run these but I've seen at least 3 people who have and tbh usually antivirus stops the 2nd stage payload. So make sure Defender antivirus is turned on, and maybe consider blocking newly registered domains using ad block if you are more tech savvy. Remind your grandparents and young siblings to never do anything with Win+R or disable it on their pc if you know how. Infostealers are nasty and having one on the family pc will hurt every member of the family.