I live next door to an Airbnb house. The people paid 40k above asking to beat out a family with kids..the house needed work. It got a Magnolia Makeover..
So I was just out string trimming weeds in my garden (look, it's a fast way to clear between rows!) And hear, "god, let's just go inside. You can't even enjoy the patio with that noise!"
Oh..is my maintenance of the property I own interfering with you using a single family home as a hotel?
Good.
This indie team is making a co-op sim where you and your friends are sharks disguised as friendly dolphins
- Run a shop serving unsuspecting fish customers
- Scrub whales to win their trust
- Snatch customers and cook them in secret
It's called Shark Mart. Would you play this?
DO NOT touch that keyboard. This is one of the most dangerous attacks circulating right now.
This is called a ClickFix attack. It is not a CAPTCHA. It is not a verification step. It is a social engineering attack designed to make you execute malicious code on your own machine while believing you are proving you are human.
Here is exactly what happens if you follow those steps.
The fake page has already silently copied a malicious PowerShell command to your clipboard without you knowing. It happened the moment the page loaded. You did not click anything. You did not consent to anything. The clipboard was written to in the background by JavaScript running on the page.
When you press Win + R you open the Windows Run dialog. When you press Ctrl + V you paste that malicious command directly into it. When you press Run you execute it with your own permissions on your own machine. No exploit needed. No vulnerability needed. You did it yourself. Willingly. While thinking you were completing a CAPTCHA.
The payload varies. Researchers have documented ClickFix delivering infostealers, remote access trojans, and credential harvesters. The malware executes instantly and silently. By the time the Run dialog closes the damage is done.
The reason this attack works so well is threefold. The fake CAPTCHA looks visually identical to a real one. The instructions sound technical and therefore trustworthy. And critically, you are the one executing the command so endpoint security tools see a legitimate user action rather than an automated attack.
Real CAPTCHAs never ask you to open Run dialogs. Real CAPTCHAs never ask you to paste anything. Real CAPTCHAs never give you keyboard shortcuts.
If a webpage ever asks you to press Win + R for any reason, close the tab immediately.
I adore the symbolism of Riku’s Soul Eater looking like a devil wing on his back in the KH1 box art, and then him having a fallen angel wing in the Final Mix art at the end of the game.
Another reason why Riku is one of my favorite characters throughout Kingdom Hearts.
Apparently the one thing that can get me to stay hydrated is the thought that I'm starving data centers of cooling resources and helping delay the birth of an AI super-intelligence.