A flaw found in an HTML5 API is being used by tech support scammers to push fraudulent pages and freeze people’s computers with a fake virus warning. This is a clever use of this bug because the computer that visited this site is essentially stuck with the CPU and memory maxed out while the page is not responding. The bug was originally identified in July 2014 and it is an abuse of the history.pushState() method introduced with HTML5 which according to the documentation, pushes the given data onto the session history stack with the specified title and, if provided, a URL. All of this is done by using a few lines of code:”]