As of October 6, 2026, the State Special Communications Service of Ukraine (SSSCIP) warns of a massive hacker attack that has compromised over 100 Ukrainian websites. The attackers are using a fake Cloudflare verification to deceive users into downloading malware.
Attack Scheme
The attack is carried out through a counterfeit verification prompt saying "I'm not a robot" that appears on infected websites. Users are prompted to copy and execute commands via Win+R, CMD, or PowerShell. This action results in malware being downloaded onto the victim's computer, posing a threat to personal data security.
User Recommendations
The SSSCIP strongly advises:
- Do not press the Win + R key combination.
- Do not paste commands from the clipboard that are suggested on suspicious websites.
- Inform family and friends about this threat.
It is crucial to exercise caution when checking websites and to avoid executing suspicious commands to protect your passwords and maintain control over your computer.