Bons!!!

(he/they)
Non-binary || pfp by me, banner by @CINNAMONARCH_
I like to draw and play roblox, it is fun.

[Bons!!! @Bonns_TeaParty]

Set up a ko-fi so i can get yummy tips. Huehuheuhe

https://t.co/DLVkJ7ao6K

[Mikkel @mikodamas]

munching

[Veranold @Retriveranold]

Kookoo are you stupid

[Still doppelsinner ceo @Nikkii_zo]

#doppelsinner

[𝄢: 🎸💢 Cooper / Brat / Panty / Devesto @BASSSLAPPING]

flirting

[🌈 cybr.grl 🌈 @itmecybrgrl]

Pride Decora #3: Bi flag 🩷💜💙

[test tube baby izzy @filthyguts2]

CRYINGGG

[marah khalad @mar80549]

Don’t skip please my friend

[Abdulkadir | Cybersecurity @cyber_razz]

DO NOT touch that keyboard. This is one of the most dangerous attacks circulating right now.

This is called a ClickFix attack. It is not a CAPTCHA. It is not a verification step. It is a social engineering attack designed to make you execute malicious code on your own machine while believing you are proving you are human.

Here is exactly what happens if you follow those steps.

The fake page has already silently copied a malicious PowerShell command to your clipboard without you knowing. It happened the moment the page loaded. You did not click anything. You did not consent to anything. The clipboard was written to in the background by JavaScript running on the page.

When you press Win + R you open the Windows Run dialog. When you press Ctrl + V you paste that malicious command directly into it. When you press Run you execute it with your own permissions on your own machine. No exploit needed. No vulnerability needed. You did it yourself. Willingly. While thinking you were completing a CAPTCHA.

The payload varies. Researchers have documented ClickFix delivering infostealers, remote access trojans, and credential harvesters. The malware executes instantly and silently. By the time the Run dialog closes the damage is done.

The reason this attack works so well is threefold. The fake CAPTCHA looks visually identical to a real one. The instructions sound technical and therefore trustworthy. And critically, you are the one executing the command so endpoint security tools see a legitimate user action rather than an automated attack.

Real CAPTCHAs never ask you to open Run dialogs. Real CAPTCHAs never ask you to paste anything. Real CAPTCHAs never give you keyboard shortcuts.

If a webpage ever asks you to press Win + R for any reason, close the tab immediately.

[Pea٠࣪⭑ @PeashooterTheY1]

ive been recommended gold

[dum_kitten @dum_k1tten]

I finished a model that I had started working on a long time ago but put on hold

https://t.co/5pV8VWHoZq

https://t.co/4ZXPRtIna9

And I also made and uploaded a few Pride ribbons

https://t.co/BN4SKUX4YE

[Sour4D @Sour4D_]

More cool package combos to try

[mortis || 7N7DOELUVR ⋆.˚🍎☕️ @geminemerald]

ABSOLUTELY bully me for this I don't really care but sometimes when I really can't do stuff I read these n7 comfort cards I made and they usually help. Burps

[OatZ @Turtleoatz]

in reality it should be this

[Hero @heroicHomo]

Let’s get clean with mama

#phighting

[Behr🕷️🕸️ @peterbehrker]

twitter will deadass just grace you with the most beautiful woman of all time and expect you to keep scrolling

[遥💣華@🩵💛🌙🎱 @haruka_0v]

気になってる人いたので
一応ぬいぐるみの素体はこれを使用してます
押すと音が鳴るぬいぐるみです

[Gee🆒 @Gee_7556]

When u feeling sad but then remember the sonic dont trust ur thoughts after 9pm image

[teg @Teggei]

Time #OAWROT

[SO? @noor_supernova7]

I apologize for interrupting your browsing, but if you are holding your phone right now, please join me in writing... Pray for me to have food and safety, oh God, I need food and safety.

[Tarchling👽💎 @TarchumkTarchle]

It’s not like i like them or anything!! #AlienCrystal