The phony CAPTCHA's "verification" steps include: 1. Press Windows button + R key 2. Press Ctrl-V 3. Press enter.

Notices where this attachment appears

1. Embed this notice
   BrianKrebs (briankrebs@infosec.exchange)'s status on Friday, 14-Mar-2025 22:32:31 JST BrianKrebs

   Called it. Wrote this back in Sept. 2024, about a clever Windows Powershell phishing scam that was targeting developers at the time. It uses a fake CAPTCHA that asks visitors to distinguish themselves from bots by pressing a combination of keyboard keys that causes Microsoft Windows to download password-stealing malware. Everyone said, bah, devs will never fall for this. Maybe, I said, but your average user would for sure.

   Judging from the number of recent media reports, it appears this one is pretty widespread at the moment.

   https://krebsonsecurity.com/2024/09/this-windows-powershell-phish-has-scary-potential/