Comment Re:This is the part I don't get... (Score 2) 33
If you click through to see what is happening, they are being directed to copy/paste some text into a command prompt - I assume the troubleshooting website is some official looking page that describes how to repair the issue. The text has a series of innocuous commands that may appear to be legit to a naive user but there is a command, buried in the middle, to download and run the malware - in the linked page, the Mac version used curl piped to zsh and the Windows version used mshta.