Fake Google Chrome errors trick you into running malicious PowerShell scripts (www.bleepingcomputer.com)
from kid@sh.itjust.works to cybersecurity@sh.itjust.works on 18 Jun 2024 11:50
https://sh.itjust.works/post/21022073

#cybersecurity

threaded - newest

Telorand@reddthat.com on 18 Jun 2024 12:43 collapse

These errors prompt the visitor to click a button to copy a PowerShell “fix” into the clipboard and then paste and run it in a Run: dialog or PowerShell prompt.

“Although the attack chain requires significant user interaction to be successful, the social engineering is clever enough to present someone with what looks like a real problem and solution simultaneously, which may prompt a user to take action without considering the risk,” warns a new report from ProofPoint.

I’m sure this works, else they wouldn’t do it, but FFS, somebody would have had to have been living under a rock to not know by now that executing random code is a bad idea.

And yet, people still fall prey to the gift card scams, so what do I know?

Chronographs@lemmy.zip on 18 Jun 2024 12:46 collapse

Yeah my first thought on reading that headline was that I’m sure it works on someone but certainly not me