How does the cmd dir/s work?

I’ve run across a couple of videos where the scammer runs dir/s on their computer and at the end it pops up a phub dialog with other scare tactics. But watching the video the scammer doesn’t seem to be typing it out? Do they install this in the background of the computer? Can the baiter see them install it?

1 Like