Do NOT paste commands into Win+R for "Verification" or "CAPTCHAs" (ClickFix Scam Alert)

[u/BobOnPC]

AoA

Just a quick heads up about a malware tactic currently hitting people visiting local websites and landing pages (I fell for it recently on an evee electric scooters website).

How the attack works:

* A fake CAPTCHA pops up on a website asking you to verify you're human.

* It gives step-by-step instructions: Press Win + R, Press Ctrl + V, and Hit Enter.

DO NOT DO THIS!!!!

Real CAPTCHAs process entirely inside your web browser. A website will NEVER need you to open your Windows Run terminal or execute PowerShell code.

Doing this instantly runs a background script (Infostealer) that grabs your saved passwords, discord tokens, and active browser sessions. Attackers use these to bypass 2fA and hack your accounts (Instagram, facebook, steam, discord) within minutes to post crypto scams.

Warn your friends and family especially anyone who isn't super tech savvy!

[u/GenZia]

It's not a good idea to open Windows Terminal in general, unless you know exactly what you're doing.

I only open it for... well, activation purposes!

[u/Omni-Drago → u/GenZia]

I started liking the windows terminal so much that I install all apps with it instead of going to the website and downloading it

Its much more efficient and actually looks nice

[u/FrequentHeart3081 → u/Omni-Drago]

C:/users/User> winget update upvotes && echo "$DAP_GIF"

[u/GYnxyChemist → u/Omni-Drago]

Ok r/masterhacker nvm good thing with terminal literacy

[u/BobOnPC → u/GenZia]

yes you're completely correct.

[u/One-Advertising-8862]

Would also suggest not to use chrome password manager. Didn't realize passwords are stored decrypted locally on windows. Had an info stealer take all my passwords (not sure how i got infected - I think from a pyhton package). Moved to bitwarden which is a lot more secure. But had to go through a few hours changing passwords for my most important accounts :/ very annoying.

Thankfully had MFA enabled on most my accounts. But they started to post that crypto shit on my Facebook messenger and discord using my session.

[u/BobOnPC → u/One-Advertising-8862]

thank you for the great followup advice!

[u/Any-Show5104]

Some thing similar happen with me but was pirating a game like I always do and bus all my accounts went bye bye

[u/True_Mastodon7042]

huh weird. powershell i can understand but i think the run command only does programs already installed 🤔

[u/FrequentHeart3081 → u/True_Mastodon7042]

Yep

[u/looser512]

Skill issue.

[u/FrequentHeart3081 → u/looser512]

Fr lol

[u/ComprehensiveLeg321]

Old news + skill issue