Uh, ran into this captcha today.

[ipsquiggle@sunny.garden]

Uh, ran into this captcha today.

This is... EXTREMELY not okay???? Am I missing something?

[jackeric@beige.party]

@ipsquiggle what did it put onto your clipboard?

[ipsquiggle@sunny.garden]

And if it was just like, `curl`-ing the url I was visiting with a numeric code or something, I'd be like, okay, I get it.

But it wants me to run THIS? Like how the hell can I trust that?

(If someone wants to tell me that this is indeed a hack and the site has been compromised, I'd feel better!)

[ipsquiggle@sunny.garden]

@jackeric Just replied with that

[wanderingindigitalworlds@sunny.garden]

@ipsquiggle That is very abnormal and confusing, as what command would be pasted into the Terminal and how would they obscure said malicious command?! Yikes, that is a captcha I am prepared to fail!!

[jwcph@helvede.net]

@ipsquiggle DO NOT DO THIS!!! I believe it's called a "#ClickFix" scam - never, ever, EVER do anything involving Terminal / Powershell unless you know exactly what you are doing.

[kaimac@sunny.garden]

@ipsquiggle I think this is doing the equivalent of piping curl to bash, but with the URL obfuscated

[ipsquiggle@sunny.garden]

@jwcph Exactly!

So I'm wondering, is this actually a compromised site, or is captcha now trying to acclimatize people to bypassing their computer's security?

[dacmot@sunny.garden]

@ipsquiggle wow.

[jwcph@helvede.net]

@ipsquiggle As far as I know it's compromised. Our IT department sent out an alert about it a few months ago but I don't remember the details - though I did remember the scam well enough to recognize it, so...

This was just from a search: https://www.kaspersky.com/blog/what-is-clickfix/53348/