Cybersecurity

7734 readers

25 users here now

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

Be respectful. Everyone should feel welcome here.
No bigotry - including racism, sexism, ableism, homophobia, transphobia, or xenophobia.
No Ads / Spamming.
No pornography.

Community Rules

Idk, keep it semi-professional?
Nothing illegal. We're all ethical here.
Rules will be added/redefined as necessary.

If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities !databreaches@lemmy.zip !netsec@lemmy.world !securitynews@infosec.pub !cybersecurity@infosec.pub !pulse_of_truth@infosec.pub

Notable mention to !cybersecuritymemes@lemmy.world

founded 2 years ago

MODERATORS

kid@sh.itjust.works

Lanky_Pomegranate530@midwest.social

Hackers use Fake Cloudflare Verification Screen to Trick Users into Executing Malware (cybersecuritynews.com)

submitted 2 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works

11 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] sugar_in_your_tea@sh.itjust.works 2 points 13 hours ago (1 children)

There's a great way to know what's in it: paste to a text editor or something. Here are my red flags for this sort of attack, in order:

Asks me to do something outside of the web page, to make the web page work - kind of makes sense for email verification, but that's about it
Asks me to copy paste something - kind of makes sense for CLI installers or configs for dev tools, but not much else
Uses the Run Command function - nothing good happens with that function, and IMO Microsoft should remove it; power users can open a terminal, it's not that hard

Must users should notice at least one of those. If a web page is asking you to do something you don't understand, don't do it.

[–] lurch@sh.itjust.works 2 points 13 hours ago

Yeah, that's why ClickFix doesn't work on most users, but still a few. The newer FileFix is nastier, because it looks more plausible in a situation of a download. Like, you know those fake download button ads? Imagine one of those and it leads to instructions to paste something into the native file dialog address bar instead of the run dialog. This will trick a lot more people.