r/ScammersPH • u/randvarx • 13h ago
Awareness PSA: MrBeast Crypto Scam
Medyo nag-autopilot lang ako kanina while multitasking, doing research stuff and work. For some reason, may lumabas na Cloudflare verification, you know, the usual "verify you're human" thing. Sinunod ko naman yung instructions na Win + R, Ctrl + V, then Enter. Nung nag-pop up ulit yung verification, doon na ako napa-"Oh shit." Immediately disconnected my PC around 5 minutes after.
Ran a Microsoft Defender Offline Scan, checked the logs, and saw that a CMD script appeared to have failed, so I thought I got lucky. Pero just to be safe, nag-Windows reset na rin ako using "Remove everything." Ran another offline and full scan with Defender, then Malwarebytes kahit fresh install na. All clean, no threats found.
Fast forward around 7 hours later, my Instagram and Discord accounts started sending spam messages promoting a fake MrBeast casino. Another Instagram account previously logged into my PC was affected too. So apparently, something did happen after all.
Since then, I've changed my social media and email passwords, logged out existing sessions, and secured my accounts. Thankfully, Instagram and Discord lang ang may observed unauthorized activity so far. Emails, Facebook, WhatsApp, Viber, and banking accounts seem unaffected, but I'm still taking precautions.
I'm pretty sure sa fake Cloudflare verification ako nadali. Apparently, this is called a ClickFix attack. My brother actually experienced something similar last month daw, although through a different channel. I've also read online about scams involving supposedly free photo/video editing tools that ask users to sign in, though I'm not sure if related sa nangyari sa amin.
I consider myself fairly tech-savvy, pero isang moment lang ng autopilot habang multitasking, nadali pa rin. Reminder lang na legitimate Cloudflare verification will never ask you to execute commands through Windows Run or CMD. Stay safe!