Comment by chii
> The clipboard strategy feels like it should be easy to block too
yea, the browser should actually have each site ask for permission to modify the clipboard imho.
> The clipboard strategy feels like it should be easy to block too
yea, the browser should actually have each site ask for permission to modify the clipboard imho.
That might add another step but I think it is unlikely to help reduce the number of victims. If someone is willing to bring up the run prompt and paste whatever they have in the clipboard they are also likely to be social engineered into clicking yes on a dialog that tells them to allow clipboard modification.