I came across a CAPTCHA-like prompt that tried to get me to run code on my computer. I reported it to the site, but I’m trying to understand the risk. The code itself isn’t included here, so I can’t verify exactly what it does.
What does a fake CAPTCHA that asks me to run code actually do?
Asked by
FJORD_12
Answers
There isn’t enough information in the description to identify the code’s payload. These prompts can be used to trick people into running commands that download and execute more code, but the exact behavior depends on the command and what it retrieves. Don’t run it just to see what happens.
Reply to this answer
A CAPTCHA should not need you to paste commands into a system tool or terminal. Close the page, and don’t install anything it offers. If you already ran the command, disconnect from the network if you suspect something started, then use a trusted security tool to scan the device and get help reviewing what happened.
Reply to this answer
Be careful where you upload screenshots or samples, too. A site that hosts suspicious content can still show misleading download buttons or push unwanted extensions. Don’t install an extension just to view an image, and remove any you don’t recognize through your browser’s normal settings.
Reply to this answer
If you can obtain the actual text safely, share it with a reputable security professional or an analysis service that accepts samples. Redact personal details first, and don’t open or execute any downloaded file. A screenshot alone may omit the parts needed to tell whether it disables protections, fetches another script, or does something else.
Reply to this answer
Add your answer
Answers are reviewed before publication.
FJORD_12:
That makes sense. I’m treating the screenshots as suspicious rather than assuming they show the full chain.