It is malware. On Sat, Feb 7, 2026 at 6:45 PM Jeremy Teo <[email protected]> wrote:
> I'm asking this because upon visiting "tesseract-ocr<dot>com", I am > greeted with a suspicious "verification pop-up" asking to open up windows > powershell and press "ctrl-v", which obviously means it's asking me to run > what is probably malware on my machine. I've attached the ctrl-v payload as > a .txt file if anyone wants to analyse it. > > If it isn't run by the actual Tesseract-OCR devs, I'm gonna recommend > emailing [email protected] since that's the domain registrar (based on > looking up the WHOIS). > > > -- > You received this message because you are subscribed to the Google Groups > "tesseract-ocr" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion visit > https://groups.google.com/d/msgid/tesseract-ocr/3326d46b-2c0f-4f24-8029-9b8cc8021209n%40googlegroups.com > <https://groups.google.com/d/msgid/tesseract-ocr/3326d46b-2c0f-4f24-8029-9b8cc8021209n%40googlegroups.com?utm_medium=email&utm_source=footer> > . > -- You received this message because you are subscribed to the Google Groups "tesseract-ocr" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion visit https://groups.google.com/d/msgid/tesseract-ocr/CAJDV7C%2BW0KnR5NAHno%3D4%2Bt_k7T-nAYUfr23iwOCdrc8wvQo3wA%40mail.gmail.com.
