This Captcha Can Hack your Discord! (and everything else)

[@NoTextToSpeech]

🌏 Get an Exclusive NordVPN deal + 4 months extra here ➼ nordvpn.com/notexttospeech It’s risk-free with Nord’s 30-day money-back guarantee! ✌

[@mathydagonlaz57]

no

[@illyachankawaii]

no

[@citizenforeign]

ok daddy

[@el11te]

Daddy uwu

[@hatefulsorrows2]

ok daddy😔

[@DanYami]

>new scam just dropped >it's just "hey paste your credentials" again

[@imafailure]

pretty much nordvpn.

[@user-ew8lt6yi2i]

u want worse scams?

[@dadarkmatterdude]

Oh wow, the man, the legend, Dan Yami, the lead dev of SoA mod is here! Didn't expect to see you.

[@sd2k42real]

I wonder what his average viewer age is

[@kenosawa8169]

theres a special scam called metastealer stealer and steals all of your info upon clicking different from paste your credentials, no ones going to do some advanced shit scam on roblox kid that probably hasnt spend anything on roblox and 1856 lvl on blox fruits

[@Kirboiiii]

I have heard NTTS say to me "I love you" more than any other person I've met in real life

[@Nugg3tslay3r]

Same...

[@nov387]

The amount of "Mwah" I've got from watching NTTS videos is even more than the total times I've ever held hands with someone of the different gender. Relatable 👍👍

[@TheOfficialNumber7]

I've never been kissed so much

[@MeepsFTW]

fr 😔

[@pomfrit2091]

relateble

[@ElysiaBush]

So they just tell you "to complete this captcha, paste this funny little command into the terminal and execute it, and it will verify your captcha". This is the dumbest fraud I've ever seen.

[@rollinontheboard]

🤖

[@notvixios]

Imagine being so lucky you get a twitter follow bot and the sophie rain spiderman video all in one day

[@rinssleepy]

silly guy

[@rxmeofr]

Lucky ahh, btw i like your vids

[@universoul8929]

real

[@AlexTsaava]

bro im ur fan lol, True (im an og a fag since 2021)

[@Omena0]

YOOOO

[@NimVim]

Please dress up as a minion and eat a banana tomorrow, its very important.

[@jacksonhanna-bp5ge]

for science

[@AlisaMaribel]

how so many likes

[@NimVim]

@@universaltoons Theres demand, NTTS can be the supplier. This business model will go to the moon and possibly steal it aswell!

[@uvsii]

i read it as "please dress up as a minor" and now i feel horrible abt myself 💀

[@universaltoons]

​@@NimVimreal!

[@Chain_Priest]

I call this: "We won't make malware. Go hack yourself"

[@Aryasvitkona]

Reminds me of "Ethiopian Malware" meme viruses from back in the day that just popped up an error asking you politely to delete System 32 cos they couldn't afford the complex programming to do it automatically. Ah the good old days when people weren't just trying to ruin lives

[@bubgamingandvlogs3870]

​@@Aryasvitkona thats also just your average 10 year old trying to make malware

[@seeky_xd]

i hate captchas on discord, like dawg you know everything bout me and still think im a robot

[@bbiwu]

even tho i also hate em, they are used to stop ppl from autobotting and also, imagine when those accounts get hacked and start spamming those "free steam gift card" links, those are automated actions, and so could be the friend requests, even from a user that they used to know

[@seeky_xd]

yea but like discord NEVER does that cuz the hacked accs are gonna dm ur friends

[@d.bannings]

discord once locked my account for suspicious activity when I tried to add someone as a friend 😭

[@garbag.e]

i really think you need to talk about VPN's that sell your data

[@danik0011]

excuse me did i read that right

[@twitchhighlights4204]

not really sell your data but your data isnt safe if the police go to these well known vpn companys and just ask for the data they'll just give it over makes the point of the vpn useless so thats why you have to gets a no-logs policy vpn

[@anonkittygirl]

@@twitchhighlights4204does nord vpn have a no-logs policy?

[@el11te]

All the scammers could get jobs in the time they use trying to scam.

[@Tathanic]

Get a job? in this Economy?

[@exactingbirdy]

for them scamming is easier

[@SirHaxe]

I mean scamming is just WAY easier as you can see

[@JankieHands]

Not to defend them, but they are usually in a third world country with low oportunities.

[@emily1]

Nigerians do this out of a lack of jobs and poverty. If it’s anyone in the west world, 9 times out of 10 they’re u18s being devious in which they’re too young to get a job

[@noid3571]

> single click data grabber > look inside > it asks you to copy and execute code on your own This literally that one image of the "albanian virus" that asks you to delete something and pass it on

[@captheobbyist6434]

so they just straight up tell you "to complete this captcha, paste this funny little command into the terminal and execute it, and it will verify your captcha". this is the dumbest scam ive seen by far.

[@emily1]

Is it tho??? ppl were stupid enough to paste javascript code into their searchbar for stuff that on ROBLOX and in the process share their session cookies with the miscreants. I don’t think it’s far fetched that the vunerable tech illiterate people which are always the prime target would fall for this.

[@kimapr3817]

The arch linux forums have a captcha kind of like this. You run the command then copy its output into the text box

[@Kynatosh]

@@kimapr3817 If you use archlinux you know what the command does lol

[@blobfish1649]

To 99.99% of people it's stupid, but all it takes is that .01% of people to get all they want

[@zeenxdownz]

​@@kimapr3817 that is a bad captcha

[@CryptidBuddy]

Captchas have stopped absolutely no bot made after 2016, have annoyed billions of people & introduced dozens of security issues. This is a level of inefficiency & clinging on to life despite uselessness, that is usually only expected from a government run project.

[@SergeantExtreme]

Unless you're implying Google is the government, Captcha is owned and run by Google.

[@JIREX]

They actually have stopped bots. You need CAPTCHA Bypasses, find workarounds, or buy stupid ass “methods” for thousands of dollars to use their API without needing to solve a CAPTCHA. Sometimes it costs like 12 cents PER lmao

[@ccgm_harpy]

Gotta disagree with you. I own a Discord group for trading video game items. We used to get regularly raded by scam bots because people have a lot of valuables there. I created a captcha bot and the problem went away. Captchas can be defeated, but they require an investment and sophistication to get around. So they still help.

[@d.bannings]

it's been used to train ai, I think you overlooked that

[@retzerR]

There are so many captcha providers, from CloudFlare, to hcaptcha to Googles, but no public ones have been released by any government, at least not for any websites I visit.

[@justayouraveragejoe7021]

its always a good idea to not use chrome for passwords, that's literally where every virus looks first!

[@d.bannings]

+1

[@PRO-lq5pn]

This went from "Prove if you're not a robot" to "Prove if you're able to send us all your info"

[@zuperkirbi8378]

I like how you actually put some comedy in your ads

[@thatprettyparrot]

The best part about the Captcha websites is that they're completely blank except for the fake Captcha. I think that'd be the major flag, since most websites always have something else to load before the Captcha registers.

[@GrzesiekJedenastka]

You shouldn't rely on this. In the future the scammers might make the websites look more legitimate, but they will still need you to do some weird action.

[@Danihacs]

*3:39** AD Skip. Thank me later*

[@DashGamerCool]

Thanks!, I still watched the ad lol

[@Madness1337]

Browser plugin called SponsorBlock will automatically skip all ads, including integrated video ads like this. Thank me later

[@Tlo69420]

Can't ppl just skip by themselves?

[@Nam3swastaken]

let NTTS get his bag bruh jesus

[@vendorfrostblood5481]

jeez, dude, have a Snickers or smth

[@Kazuki-Matsui]

This is actually terrifying, like for someone uneducated this is just scary.

[@ZoaInBlack]

Yeah, most internet users aren't that tech savy but then again someone downloading a totally not NSFW game should know better.

[@David280GG]

this is literally just another "paste your credentials/run this specific code here" scam. you should know better

[@n0rbert79]

Why do VPN companies still have the same lie in their "you have to read this as we wrote it" saying, that you can unlock contents on video streaming sites by switching to another country? Thes have the full list of all VPN exit points and they banned them for this exact purpose. No hate, I get it, you need the sponsorship, but seriously this has been incorrect for many years by now and yet they insist on this.

[@frsregsnk]

Mullvad works on most streaming services

[@ccgm_harpy]

To the hackers that employ this method: you're not very creative and your scams suck.

[@Skolkostoitsamolet]

This is not a captcha, this is a "stupid test". I think schools, universities and even workplaces should add mandatory basic internet literacy courses. Everyone are connected nowadays but barely anybody knows how not to give hackers all your saved accounts and credit card info.

[@sorimasn]

Reminder to never save your passwords directly to your browser. I know it’s extra work, but type them out yourself each time. I had an old skype account hacked by some brazillian dude who kept adding brazilian money to it to make international calls.

[@flavinho-]

6:20 They're actually pretty creative for that lmfao

[@parkourchinx7978]

You'll be surprised by the amount of people that fall for this. We had a PSA for this at work as clients were falling for it..

[@massmonster1184]

I love how I click links without even thinking!

[@theairaccumulator7144]

you literally have to paste something into your run box for this you'd have to be beyond stupid to do that

[@Chlebqowyyyyyyyy]

4:46 Actually, the arch forums use one that's made to return a hashed string that doesn't change in your os and it's completely legit.

[@CleanisClean1]

5:36 .minecraft? Now I want a minecraft lets play

[@cosmicGotTaken]

7:00 "TESTtickles" lmfao

[@Synezky]

1:25 rookie mistake

[@AshcookiesVA]

Hey NTTS, I’m currently sick at the moment. Your videos make me feel much better and know how to avoid scumbags, and scam bots. Thank you NTTS.

[@JesterChat81]

I've seen this exact comment twice so far, hmm

[@M.Ahnungslos]

How do you scam bots 😜

[@odmack]

@@JesterChat81 Hey NTTS, I’m currently sick at the moment. Your videos make me feel much better and know how to avoid scumbags, and scam bots. Thank you NTTS. 14 Reply

[@AshcookiesVA]

@@JesterChat81 My message might have gotten copied by some dipshit spam bot

[@manelneedsaname1773]

Hey NTTS, I'm currently jorking it at the moment. Your videos make me feel much hornier and know how to avoid

[@supercool1312]

“captchas should be easy enough that a grandma can do them” bro has never visited the dark web

[@RealGhoda]

4:10 its pi

[@adiyn_]

Is this a reference to that one guy who'd reply to super complicated looking integration stuff and just reply with pi or something?

[@mrio0]

​@@adiyn_ i dont know who you are talking about, however this does solve to pi. Here's proof: Know sin^2 + cos^2 = 1 so √(1-cos²) = √(sin²) = sin x so sin(x) / √(1-cos²(x)) = sin(x) / sin(x) = 1 So the function becomes 1³ = 1. From 0 till pi, integrate dx. U get F(x) = x (+ C), from 0 to pi => F(π) - F(0) => π - 0 = π

[@dangernoodle235]

The first glance at that integral had me worried, but once u see the trig identity, it all falls apart quick

[@masterplane9131]

​@@dangernoodle235 true it took me 2 seconds to get it

[@RealGhoda]

@@dangernoodle235 Same

[@xmegaaaaa3729]

I remember have stumbled upon this kind of captcha when downloading some Minecraft bedrock addons. My cybersecurity instinct triggered, I immediately knew something fishy was happening, and I completely dismissed this trap, I even cleared my clipboard afterwards.

[@catergamer1]

12:58 unfortunately??

[@JIREX]

AND fortunately

[@spiddo8202]

he said AND fortunately lol

[@urlocalblackneighbor]

pause at 3:09 and look at the top right corner💀

[@EkoloxMusic]

bro what is dicktown 💀🙏

[@jan_kulawa]

if you fall for a fake captcha that literally asks you to tinker with your OS (and using Win + R, which not many people even understand how it works)... I'm sorry to say, you can't use a computer without supervision

[@steffregele]

0:30 romania mentioned 💯💯💯💯🥶🥶

[@rnicoles9355]

real

[@kit2691]

hell yeah

[@RaduG-k5s]

uhhhh… I don’t think for a good reason 🎉🎉🎉

[@copi4766]

For those who dont want to buy a VPN there is a small work around you might be already using Some ISP / Most ISP to Cut cost use CGNAT which is a method where the ISP will share 1 IP address with 100 Differnt Subscribers you can do some tests to find if your ISP is using CGNAT or you can just ask them (most likely they don't know what that is) SO If your IP gets leaked is like many people who is using the same internet Provider as yours gets leaked. So They will DDOS the ISP server and not your modem.

[@Opcupic]

lets be captchas are the only place where u might actually use the algebra we learnt years ago, until you realise you can even remember that shit

[@toxyjohn]

Just like crossing a road, always make sure its safe before you run.

[@Un_revealing]

4:09 Bro what 😭😭 I thought U I wouldn't need integrals again in my life

[@ShadowEO]

HTA is for making "native" applications using HTML, it's a legacy tool that still uses IE's engine, and has no sandboxing, so any JS/VBS can run through it. Also NTTS, you could've right clicked the start button and hit Run from there.

[@bellamindie]

3:39 end of sponsorship

[@Stake2_]

I'm happy that the amount of salt I have about viruses and scams is enough so I can easily tell if that's a scam :3

[@Avi8torYT]

this man is single handedly making the internet a more safe place

[@themoneysometimes]

Fake CAPTCHA: "Press Windows Key + R" Chromebook user: "...s***" (yes, this could apply to all non-Windows operating systems, but Chromebooks physically don't have a Windows key)

[@T0tt4ly]

how do people fall for scams this obvious

[@dumblenutz5561]

Navigating download sites without getting malware is apparently a skill

[@Daryl-gg6fh]

Some people are just gullible

[@imafailure]

Now second thought. how people trust this ad? (nordvpn) nordvpn is cleary a sketchy bussiness. and you shouldn't trust it with your Ip.

[@dadarkmatterdude]

Gullibility. Digital illiteracy. Greed. Depends on whatever the scammers are trying to catch you on.

[@dadarkmatterdude]

@@dumblenutz5561, adblockers exist, you know. Browsers like brave also exist.

[@Elizak_Izag]

I actually don't get how you manage to upload videos that fast, they're always really well edited it's insane :0

[@benjaluth09]

Remember when malware creators used to code their malware themselves?

[@TheOfficialNumber7]

Drawing and watching NTTS is a vibe lowkey

[@ccgm_harpy]

In the case of that website, YOU'RE CLICKING A DOWNLOAD BUTTON ALREADY. I don't think you needed all this work to trick someone into downloading something.

[@alixz.]

downloading is fine as long as you don't execute the file : the command in this video does both, it is why it more dangerous than a simple download button

[@GrzesiekJedenastka]

@@alixz. The point is, these scammers are so stupid that instead of just making the download malware, they made the captcha malware... The person was getting scammed anyways, and they decided to put this extra effort in lmao.

[@peterfade]

these hacks/scams are now as common as preds on the internet

[@lilharm]

11:14 THEY KNOW WHERE I PEE?!

[@nikolayIliev-o1v]

10:03 bro Patrick is getting a helping a lot

[@GoldenNoKami]

I love learning about networking and Coding, its so fun seeing stuff like this in real time

[@sd2k42real]

Nordvpn? you just know they cooperate with glowies

[@olekmeineeier1293]

am I the only one that gets hella paranoid watching these videos like "have I ever done this?"

[@ΟΜΧ]

video for people who dont wanna watch all this: its a fake captcha that copies powershell code to download vbs script code from a site, then it asks u to Windows R which opens quick actions menu, then it asks u to paste it and once u run it u get lumma on ur pc

[@patrickfogui3620]

Thanks for teaching me new scamming methods each day 😃

[@UnitedStatesOfClash]

legends say if you oil up, you will get 69 years nitro

[@Satoshic_]

it is extremely fuuny , to try to contact a person, who sent this website and tell him that you are running linux, so it will be just hilarious to watch his following actions if any

[@as-ng5ln]

When you did read out what "mshta" does, I was like OMG, only Windows can be that stupid.

[@sam.nicole3129]

shout out to the guy who sent this scam to ntts, he sacrificed his dignity for the safety of others 💀

[@killoucreepergames1181]

A few years ago, I got a different type of Captcha scam. It opened my message app to send messages to a bunch of phone numbers in other countries (that would be expensive asf)

[@greatveemon2]

I wouldn't be surprised if a scammer use a catchpa to ask the user to go on target to buy a gift card and enter tthe code on it.

[@BloxProgrammingRBLX]

Captain NTTS

[@Cxntrxl]

Careful when it comes to testing viruses on a VM, VM escapes are very possible, especially if this one did, in fact, figure out it was on a VM. If I’m going to be honest, I’d recommend not even testing this stuff yourself, but if you have to then I’d do it on a separate blank machine all together on a different network.

[@Zerathina]

“It doesn’t take a rocket surgeon” HEY! Rocket surgery is hard work man! Lol

[@knifegame556]

How to not get scammed 1 do not download discord 2 do not have games that require accounts 3 always have your money in cash Congrats! You are not getting scammed.

[@MaakaSakuranbo]

whoa, nice tip! While walking around wiht my cash money I even met a guy who sold me a bridge! Solid investment! Would've never found that on the net

[@00qerq]

how to get mugged 101

[@knifegame556]

(Optional, if u want to have money on a credit card, do Not trust websites on discord, and also if u are being mugged make sure not to have all the money with you Dummy)

[@hithisisq]

12:20 the Batista pfp with the cat ears is fire

[@writtenskate522plays]

Im glad i never see discord scams like this

[@Dargorthverse]

That's one rare case where I'm sorta glad discord is blocked here in Russia.

[@gruphius]

For anyone interested in a deeper analysis: John Hammond has made a video about this about 2 months ago in which he even decompiled the virus.

[@maskman2243]

I must now becom heckerman before this gets patched

[@monpote5867]

yooooooooooo

[@GrzesiekJedenastka]

This is illegal and immoral. Don't do this. Also it won't get patched, because it exploits the human error. There's no patching humans, other than educating them.

[@MisterPancake778]

10:50 This is why I NEVER save cookies onto my browser with important shit on it, ALWAYS set them to delete themselves because if someone gets into your PC this will be the first thing theyll want.

[@delusionalmerg1323]

I love when people create new methods of ruining lives☺️☺️☺️

[@ajsmusic711]

At this point im not clicking on anything on discord

[@ambar8494]

I got so paranoid from everything that now I don't even click on what my friends send me, lol

[@d.bannings]

😭

[@Uopra]

12:02 it also might be on your network, so you might wanna also reset every device on your network too

[@Concxrde]

Honestly lets just realize how people do this as their job.

[@fiiral5870]

0:59, well in all fairness currency sign after the value isnt too uncommon in Europe

[@TerryIsCoolIGuess]

Theres some countries that either type the dollar sign BEFORE the number ($500) or type it right after (500$)

[@defaulted9181]

As someone that uses a Mac, I see this as an absolute W

[@53125]

2:45 private relay

[@NotACupcake]

I'm less than 2 minutes into the video. Although you're correct that the dollar sign should go before the number... I'm going to fight you on this. When you speak in a sentence you state verbally "five hundred dollars". Why would anyone say dollars five hundred in a verbal sentence? 500 dollars = 500$. No one is out here saying dollars five hundred so why are we writing it like this: $500. I rest my case. Great video btw lol.

[@OhneHoffnung]

- New scam just dropped - Promotes a scam Okay.

[@vincentrodrigues6284]

Discord's moderation last hope

[@atomisadev]

that random integral was funny as hell

[@toshiodagoat]

0:34 romanian spotted 😭😭😭😂😂😂

[@TBVGAMING34]

😂😂

[@pinkimena-nebulous6646]

3:16 funny enough when my grandma got a capttcha she started talking about how people wanted ai to control the world

[@pinkimena-nebulous6646]

13:16 I mean

[@proboiz_50]

3:31 Thank you mpuaa always got me💀

[@IlanSaysHi]

2:28 my Internet speed is like 100mbps

[@lol-vv5pb]

mine is 8 mbps

[@mad6409]

That's average

[@raigngaming]

I just got into a Discord server that tells me to add a bot to my account? that can literally access my Email, is this a scam or nah?

[@Sonixery-p7p]

If its not join servers for you, its still kinda safe. Its your own choice though, i dont recommend doing it if its an untrusted server, i cant even understand discord. but what can they do, botting your mail? Scamming? I dont think so. The chances are slim but its still possible, atleast. Its not even worth their time to do that. Plus many bots *ask* for that for whatever reason, so yea, in my conclusion it is pretty safe.

[@dcg-doomsdaycultforgamers1180]

Your videos are so informative!

[@karbanite]

*Does captcha* *Loses a year worth of nitro* *5 stages of Depression*

[@danik0011]

this is some next-level evil lmaooo, hiding code behind the limited width of run?? waiting for a windows os patch that will expand the input height to always show the entire text, or give a popup of "hey here's the full clipboard of what ur pasting rn, u sure u wanna paste it?"

[@discussions.]

Is it bad that I don’t know who Sophie Rain is?

[@MaakaSakuranbo]

idk either, guessing some porn star

[@shatteredham7_576]

This makes me wanna buy a 7 dollar dominos pizza and an arbys burger along with a lobster

[@iwasneverjoebiden]

Let me guess it just says some random text and puts like 50 spaces so the user can't see and it only runs that malicious code after

[@iwasneverjoebiden]

KNEW IT

[@iwasneverjoebiden]

Dude it's so obvious

[@MaakaSakuranbo]

tbf, even if you see the first bit as a user, if you're not very skeptical you might just see "Oh yeah it goes to that website with a captcha-verification at the end, seems legit"

[@Zeuqh]

The PC security channel did a video very similar to this a few days ago anything cybersecurity related I check out his channel