Some time ago while visiting some web site in Opera 12.12 following Windows 7 UAC prompt appeared on screen:

C:\Windows\SysWOW64\cmd.exe /c at 13:29:00 /every:T,M,Th,F,W,S,Su wmic.exe nicconfig where "IPEnabled=true" call SetDNSServerSearchOrder ("", "")

Obviously, I declined it.

The method by which phishers attempted to get my data is pretty clear, but how they did manage to execute the command from browser?

1 Answer 1


Phishers may use Javascript like this:

var wsh = new ActiveXObject('WScript.Shell');
command = 'cmd /k ' + 'what ever ...';

It works only if you turn off the security features in your browser which will need to use ActiveX.

  • 2
    Oops... Never knew that Opera is able to work with ActiveX. Thought that it works in IE only.
    – Paul
    Sep 21, 2014 at 6:26
  • What? ActiveX in Opera? As I understand this Opera help page, this isn't the case.
    – nixda
    Sep 24, 2014 at 21:23

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.