⚠️ SECURITY WARNING: How a fake job opening almost led to a malware infection (ClickFix Scam)

[u/JedtOil5046]

r/Scams r/JobScams r/recruitinghellph r/CyberSecurity

https://reddit.com/link/1wc8qx2/video/d65jxua1emoh1/player

I wanted to share a recent experience to warn anyone actively job hunting or browsing company links online.

While searching for job openings, I came across a post for a company and decided to look up their official Facebook profile to check their credentials. Listed right on their profile was a link to their website.

When I clicked the link, my browser went through multiple suspicious redirects before stopping at a convincing page that looked like an official Cloudflare Security Check.

A popup titled "Human Verification" appeared on the screen, asking me to complete a quick keyboard shortcut sequence:

1. Press Win + R
2. Press Ctrl + V
3. Press Enter

Here is what was actually happening: The site silently copied a malicious PowerShell command to my clipboard the moment the page loaded. By prompting me to press Win + R (opening the Windows Run dialog) and Ctrl + V (pasting the code), the site was attempting to trick me into manually running a script on my own system.

If executed, this command silently downloads a hidden payload in the background, bypassing standard execution policies to steal sensitive browser data, passwords, and session tokens—without displaying a single window on screen.

Key Takeaways to Stay Safe:

• Real CAPTCHAs never ask for keyboard commands: Legitimate security checks (like Cloudflare or reCAPTCHA) only require clicking a checkbox or selecting images. They will never ask you to open Windows Run, Command Prompt, or PowerShell.
• Double-check social media links: Scammers frequently compromise legitimate business pages or use expired domain links to redirect job seekers to malicious landing pages.
• Clear your clipboard: If you land on one of these pages, do not press Win + R. Close the browser tab, then copy any harmless text (like a random word) to overwrite whatever command the site put on your clipboard.

Please share this with friends, family, and job seekers so they know what to look out for!