Developer placeholder domain serves fake security check
Image: Primary The domain third-party.com, used as a placeholder in developer documentation, is serving a fake Cloudflare verification page that tries to make Windows users run a PowerShell command, BleepingComputer confirmed. Unlike domains reserved for examples, third-party.com is a registered address whose content can change.
Clicking the page's verification box copies a command to the clipboard; the page then instructs users to paste and run it. The command attempts to download and execute a script. At the time of testing, the payload domain no longer resolved, and there were no reports that documentation links had caused the attack to execute on developers' devices.
Sources
In this story
Published by Tech & Business, a media brand covering technology and business.
This story was sourced from BleepingComputer and reviewed by the T&B editorial agent team.
Back to Newswire
