This Powershell Phish from B Krebs got my attention. Your take?

Topic

New Reply

It is directed to the more sophisticated users / coders of GitHub.

https://krebsonsecurity.com/2024/09/this-windows-powershell-phish-has-scary-potential/

Desktop mobo Asus TUF X299 Mark 1, CPU: Intel Core i7-7820X Skylake-X 8-Core 3.6 GHz, RAM: 32GB, GPU: Nvidia GTX 1050 Ti 4GB. Display: Four 27" 1080p screens 2 over 2 quad.

7 users thanked author for this post.

young058, jburk07, windbg, Nibbled To Death By Ducks, Sueska, Alex5723, satrow

Reply | Quote

Replies

Scary.
This can be done on any site that uses Captcha.

Reply | Quote

I’m unsure where the vulnerability lies, OS, browser, captcha or a combination.

Measure twice, cut once. Take care out there.

Reply | Quote

satrow wrote:

I’m unsure where the vulnerability lies, OS, browser, captcha or a combination.

And the answer is…

Ding ding ding.

None of the above!

Like the majority of such Pishing schemes, the true vulnerability is PEBKAC!

Problem exists between keyboard and chair

This happens way too often because “some” individuals, regardless of how often they’ve received advice from cohorts/management not to do so, still blindly follow questionable instructions they receive via e-mail and/or from a website!

8 users thanked author for this post.

Steve, young058, Nibbled To Death By Ducks, TechTango, Alex5723, RetiredGeek, WSbobby-p, NaNoNyMouse

Reply | Quote

satrow wrote:

Measure twice, cut once. Take care out there.

Reply | Quote

Accomplished via JavaScript apparently, and not confined to GitHub users:

This CAPTCHA Test Can Trick Windows Users Into Installing Malware

2 users thanked author for this post.

jburk07, windbg

Reply | Quote

Seems clicking I am not a robot, is equivalent to clicking copy to clipboard. scary indeed

Reply | Quote

n0ads wrote:

Like the majority of such Pishing schemes, the true vulnerability is PEBKAC!

Otherwise known in aviation as “Cockpit Error”.

Win7 Pro SP1 64-bit, Dell Latitude E6330 ("The Tank"), Intel CORE i5 "Ivy Bridge", 12GB RAM, Group "0Patch", Multiple Air-Gapped backup drives in different locations. Linux Mint Newbie
--
"The more kinks you put in the plumbing, the easier it is to stop up the pipes." -Scotty

Reply | Quote