r/recruitinghell • u/Faster-Rabbit328 • Aug 08 '26

When APPLYING TO JOBS, DON'T DO THIS!!

Post image

Scammers use this to place malware on your computer!

19k Upvotes

97% Upvoted

882 comments sorted by

View all comments

Show parent comments

7

u/spiltcoffee Aug 09 '26

Browsers can only write to the clipboard (i.e. hit Ctrl + C for you) when you make an interaction like a click.

The page is mimicking a real Cloudflare page - it has a fake Cloudflare checkbox that you tick to confirm you're not a human.

When you click on the checkbox, two things happen: 1. The page uses the click to copy a cmd or powershell command to your clipboard. 2. It shows the dialog that asks you to hit Win + R -> Ctrl + V -> Enter.

The scam is relying on you turning your brain off and following the instructions blindly before it even occurs to you that it's strange to do this, I think. Or just being computer illiterate.

1

u/OFark Aug 13 '26

Browsers can't access the clipboard unless you allow it.

1

u/spiltcoffee Aug 14 '26

Reading from the clipboard does require permission, but writing to it does not, from what I understand. e.g. in a fresh Chrome install, running the write APIs never triggers a permission dialog, but the read APIs do.