Post #4241956
2026-07-30 11:34 UTC
Oh dear. @whatthetrans@journa.host seem to be serving a fake reCAPTCHA “verification” dickover that's trying to induce people to download and run malware of some sort. For those who’ve never seen one of these before, do not ever follow any instructions telling you to paste something into a terminal or the Run dialog, especially when it doesn't even show you what it wants you to paste.
Replies (3)
-
@henry_null@sueden.social 2026-07-30 13:31
@SarahAS2@mastodon.scot this is very absurd that someone is doing this at a website for trans people... do they not know the crowd?!
-
@kunsi@chaos.social 2026-07-30 11:45
@SarahAS2@mastodon.scot oh dear, i just checked it out and i've never seen so much base64-in-base64 before (i have stopped after i reached the applescript part because i have no motivation to decode all the single characters - i presume it's either a credential stealer or a crypto miner)
-
@nyankat@beach.city 2026-07-30 16:57
@SarahAS2@mastodon.scot @whatthetrans@journa.host they haven’t tooted in a year, I don’t think they’re going to see your ping :(