Well, this was a stupid insomnia project, but... 😂 Playground code is here:

I wanted it to look more like an actual reCAPTCHA, and do a better job hiding the command. Generate a random 4 digit "ID" to look like a PIN or some MFA cheese. Also clears the clipboard after falling for the phish 😊

This is a really smart way to exploit JS ability to populate clipboard contents. Never thought about that!

Does it work on MacOS & Ubuntu? 👀

Could just as easily change the hotkeys to Ctrl-Alt-T (or whatever, I'm not sure what spawns a launcher in MacOS), and potentially use some of the terminal ANSI tricks to hide what is pasted onto this screen (maybe?). It's worth someone poking at it 🤪

You just made it easier for scammers to scam 😅

@thegrugq Reminds me of early days of IRC when “support” would trick people on doing ALT+F4 to trick windows users to close MiRC. 😀

..we dare you to come up with a high-score here

Nice

That's really cool