Post

never seen this before: a popup pretending to be @cloudflare.social turnstile using official Cloudflare name and branding to get people to run unauthorized commands in the terminal, under the guise of being a new type of CAPTCHA.

9/10/26, 4:23 am6 reposts53 likes

tf is this logo

my agent is gonna fall for this 🫩

Alex Wise

@engineer.sitereliability.best

Michael Haag has been doing good work tracking these ClickFix campaigns mhaggis.github.io/ClickGrab/

mhaggis.github.ioClickGrab - Advanced Threat Intelligence for Clipboard Hijacking AttacksClickGrab analyzes potential ClickFix and FakeCAPTCHA URLs from URLhaus