At first I thought thought I had found a candidate for "most horrifying reCAPTCHA process ever devised.

[xfavatax@haunted.computer]

@deviantollam yes this is a hacked site/malware. ClickFix campaign.

[fraggle@social.coop]

@deviantollam horrifying. I assume they're using rundll32 because Windows won't let you run an untrusted exe directly from a remote server path like that?

[paul_ipv6@infosec.exchange]

@deviantollam

wow... that's like telling someone to pick one of three random unlabelled liquids and chug it to get access to a food safety seminar...

[nothacking@infosec.exchange]

@deviantollam@defcon.social Definitely malware. It's quite a common trick. (aka clickfix)

[nanobookreview@zirk.us]

@deviantollam There's a 200% chance you're installing a virus you of all people should be able to sniff that one out.

[wooshell@chaosfurs.social]

@deviantollam You're lucky if you haven't encountered that before. This kind of scam has been around a a few years already, often on shady "driver update" sites and the like.

[alphactory@www.librepunk.club]

@deviantollam this is a common malware technique. They got pwned.

[arisummerland@beige.party]

@deviantollam Nooooo, and that totally looks like something my mom would fall for and then I would have to spend hours fixing her computer. Don't do it!

[walrus@toot.wales]

@deviantollam

I wouldn't touch that with somebody else's barge-pole.

[sollat@masto.ai]

@deviantollam
“You will observe and agree”? That’s not happening.

[toml@defcon.social]

@deviantollam Oh, HELL no!

[knova@lostcreek.social]

@deviantollam Indeed, Clickfix

[kravietz@agora.echelon.pl]

@deviantollam

Please report on https://safebrowsing.google.com/safebrowsin... as Malware > Web Malware

[deviantollam@defcon.social]

@foundthefault I'm fortunate enough to have never encountered it before. Wild.