Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


blackjack17

1713 posts

Uber Geek
+1 received by user: 865


#319442 25-Apr-2025 13:14
Send private message

Looking at bathroom ware and elite bathrooms has a cloudflare warning popup that loops with an option to "fix it"

 

If you click fixit then this pops up

 

 

 

 

https://www.elitebathroomware.co.nz/





Filter this topic showing only the reply marked as answer View this topic in a long page with up to 500 replies per page Create new topic
 1 | 2
mkissin
402 posts

Ultimate Geek
+1 received by user: 391

ID Verified
Lifetime subscriber

  #3367440 25-Apr-2025 13:18
Send private message

Haha, definitely do NOT do that

 

Edit: though I would be fascinated to see what it had put onto your clipboard




rscole86
4999 posts

Uber Geek
+1 received by user: 462

Moderator
Trusted
Lifetime subscriber

  #3367441 25-Apr-2025 13:18
Send private message

No issues using the URL you posted.


blackjack17

1713 posts

Uber Geek
+1 received by user: 865


  #3367443 25-Apr-2025 13:21
Send private message

rscole86:

 

No issues using the URL you posted.

 

 

Try scrolling down or clicking on one of the bathroom features







mkissin
402 posts

Ultimate Geek
+1 received by user: 391

ID Verified
Lifetime subscriber

  #3367444 25-Apr-2025 13:21
Send private message

I just tried it and, after a few seconds on the homepage (and scrolling down a bit) I get a box asking me to verify I am human, and then the dialog from the OP.


rscole86
4999 posts

Uber Geek
+1 received by user: 462

Moderator
Trusted
Lifetime subscriber

  #3367445 25-Apr-2025 13:23
Send private message

blackjack17:

 

rscole86:

 

No issues using the URL you posted.

 

 

Try scrolling down or clicking on one of the bathroom features

 

 

I did, tried again and still no issues. I didn't bother trying to add to cart.


blackjack17

1713 posts

Uber Geek
+1 received by user: 865


  #3367447 25-Apr-2025 13:30
Send private message

mkissin:

 

Haha, definitely do NOT do that

 

Edit: though I would be fascinated to see what it had put onto your clipboard

 

 

How could you safely find out?





 
 
 
 

Shop now for Dyson appliances (affiliate link).
mkissin
402 posts

Ultimate Geek
+1 received by user: 391

ID Verified
Lifetime subscriber

  #3367450 25-Apr-2025 13:44
Send private message

Just paste it into notepad.

 

It's going to be a text string, so just don't execute (run) it, which is what that set of commands is trying to get you to do - paste your clipboard contents (which it will set) into the windows Run dialog, and then execute it.


dasimpsonsrule
148 posts

Master Geek
+1 received by user: 37


  #3367451 25-Apr-2025 14:00
Send private message

Definitely hacked, I got the same thing. The string it copies runs a hidden powershell and tells it to download a random exe and runs it


blackjack17

1713 posts

Uber Geek
+1 received by user: 865


Behodar
11089 posts

Uber Geek
+1 received by user: 6069

Trusted
Lifetime subscriber

  #3367453 25-Apr-2025 14:16
Send private message

Nothing here, but I'm not on a Windows machine (if it matters).

 

I wonder whether it's the website itself or the presumably-third-party chatbot in the bottom right, the one with "reccomendations" misspelled.


freitasm
BDFL - Memuneh
80646 posts

Uber Geek
+1 received by user: 41025

Administrator
ID Verified
Trusted
Geekzone
Lifetime subscriber

  #3367454 25-Apr-2025 14:18
Send private message

Hacked. Do not run the commands. It is not a valid Cloudflare captcha. 





Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies 

 

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

 


 
 
 

Shop now at Mighty Ape (affiliate link).
MadEngineer
4591 posts

Uber Geek
+1 received by user: 2570

Trusted

  #3367461 25-Apr-2025 14:54
Send private message

blackjack17:

 

Looking at bathroom ware and elite bathrooms has a cloudflare warning popup that loops with an option to "fix it"

 

If you click fixit then this pops up

 

 

 

 

https://www.elitebathroomware.co.nz/

 

Image search that

 

 

 

https://xcancel.com/DaveLikesMalwre/status/1897042244684632179 





You're not on Atlantis anymore, Duncan Idaho.

prat33k
182 posts

Master Geek
+1 received by user: 31


  #3367549 25-Apr-2025 18:46
Send private message

I opened the site and didn't get the pop up.

Couple seconds later, my antivirus popped up with this


hsvhel
1273 posts

Uber Geek
+1 received by user: 596

ID Verified

  #3367552 25-Apr-2025 18:55
Send private message

Have messaged the owner

 

Update: They're onto it...give it a bit of time

 

Thanks for the heads up here though

 

 





Referral Link Quic

 

Free Setup use R502152EQH6OK on check out

 

 


jarledb
Webhead
3319 posts

Uber Geek
+1 received by user: 1983

Moderator
ID Verified
Trusted
Lifetime subscriber

  #3367555 25-Apr-2025 19:07
Send private message

I wonder how they have managed to get that kind of malware on their site as they are on Shopify and uses Cloudflare.





Jarle Dahl Bergersen | Referral Links: Want $50 off when you join Octopus Energy? Use this referral code
Are you happy with what you get from Geekzone? Please consider supporting us by making a donation or subscribing.


 1 | 2
Filter this topic showing only the reply marked as answer View this topic in a long page with up to 500 replies per page Create new topic








Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.