A page can secretly copy a command to your clipboard, then ask you to paste and run it as a human check or software fix. That simple step can hand attackers passwords, session cookies and crypto ...