‹ BackHN Continuity

Thread

Meta’s Muse has a serious 0-day

122 points · 49 comments · pavel_lishin

  1. gavinray · · focus · HN ↗
    The "zero day" is something they call a "ClickFix Attack"

    Upon Googling "ClickFix":

      > "A ClickFix attack is a social engineering technique... It typically compromises devices by manipulating victims into copying and pasting malicious commands directly into system-level tools"
    
    I'm sorry, that's not a zero-day, that's idiocy that's as old as time.
    1. dspillett · · focus · HN ↗
      > > It typically compromises devices by manipulating victims into copying and pasting malicious commands

      > […] that's idiocy that's as old as time.

      And constantly being reinvented: `curl -sL some.unverified.stuff.sh | bash`

Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.