Sometimes, you have to admire the creativity hackers use to trick you into clicking on malicious links. Recently, a netizen reported that on GitHub, there are malicious URLs attempting to deceive users into opening Windows PowerShell and executing commands to complete so-called ‘CAPTCHA verification,’ which is actually a way to execute malicious programs.

Starting last week, many GitHub users received emails with titles claiming that their project code contained serious security vulnerabilities, and they could click the link to view more details. When users clicked the link, the phishing website would automatically display a prompt similar to Google’s CAPTCHA verification process. This impersonation is incredibly convincing, making it easy for users to mistake it for a normal verification step.

If a user follows the instructions and opens Windows PowerShell to input the specified command, they essentially hand over system control to the attacker. These malicious commands can install backdoors, steal personal information, or even damage the system. Therefore, it’s crucial for users to remain vigilant and avoid executing commands from unknown sources when encountering such situations.