Embed Notice

Called it. Wrote this back in Sept. 2024, about a clever Windows Powershell phishing scam that was targeting developers at the time. It uses a fake CAPTCHA that asks visitors to distinguish themselves from bots by pressing a combination of keyboard keys that causes Microsoft Windows to download password-stealing malware. Everyone said, bah, devs will never fall for this. Maybe, I said, but your average user would for sure.

Judging from the number of recent media reports, it appears this one is pretty widespread at the moment.

https://krebsonsecurity.com/2024/09/this-windows-powershell-phish-has-scary-potential/