I saw this method on a Lemmy post some time ago. The website linked had an “ad blocker” that wanted me to go to powershell and run some command. I can’t find it anymore (I suppose the whole thread got nuked by admins/mods, so thank you) but it’s nefarious.