This is really interesting.
It’s a phishing attack targeting GitHub users, tricking them to solve a fake Captcha that actually runs a script that is copied to the command line.
Clever.
Sidebar photo of Bruce Schneier by Joe MacInnis.
Related Post
- September 20, 2024
Europol Shuts Down Major Phishing Scheme Targeting Mobile
Law enforcement authorities have announced the takedown of an international criminal network that leveraged a phishing platform to unlock stolen
- September 20, 2024
Passwordless AND Keyless: The Future of (Privileged) Access
In IT environments, some secrets are managed well and some fly under the radar. Here’s a quick checklist of what
- September 20, 2024
Iranian APT UNC1860 Linked to MOIS Facilitates Cyber
An Iranian advanced persistent threat (APT) threat actor likely affiliated with the Ministry of Intelligence and Security (MOIS) is now
- September 20, 2024
Chrome Users Can Now Sync Passkeys Across Devices
Google on Thursday unveiled a Password Manager PIN to let Chrome web users sync their passkeys across Windows, macOS, Linux,
Leave feedback about this