Fake CAPTCHA "paste this command" attacks · UtilForge Creator Playbooks, November 2026 drop

CHECK: Before You Paste a Command · utilforge.org/tools/before-you-paste-a-command
TITLE TESTED: This Fake CAPTCHA Tells You to Paste a Command. Never Do It (96/100 in vidIQ)

SCRIPT
A page asks you to prove you're human, but not by clicking pictures.
It tells you to press Windows and R, paste something, and press Enter.
That pastes a command that installs malware. Microsoft says these attacks hit thousands of devices every day.
On a Mac, the page tells you to paste into Terminal.
Here is one free check that helps. Paste the page's instructions into Before You Paste a Command at UtilForge.org.
Press Check this. It explains what the instructions would do.
The rule is short: never paste a command a website gives you.
Already ran it? Disconnect from the internet and get help from someone you trust.
Share this with someone who works on a laptop.

LONG-FORM ANGLE
Break down a ClickFix chain in a safe lab (specimen only).
Show Microsoft's and CISA's findings and the Mac variant.
Demo the check and the recovery steps.

INSTAGRAM CAROUSEL
1. A page asks you to prove you're human.
2. It says: press Windows + R, paste, Enter.
3. That runs a command that installs malware.
4. Check the instructions free at UtilForge.org.
5. Never paste a command a website gives you.

Free to reuse, repackage and publish in monetised videos, for public safety, with a link to UtilForge.org. Creative Commons Attribution 4.0 International. No approval needed.