At least, that's what security experts are increasingly warning about. Last month, MalwareBytes Labs spotted one such fake CAPTCHA that had you paste some "verification" text into the Windows Run prompt. Recently, there have also been reports of a malware called "Quakbot" that uses an even more dangerous variant of the CAPTCHA scam.
How do CAPTCHA scams work?
Hack attacks via CAPTCHAs are dangerous because users click on them out of habit when they appear on websites. Hackers are now exploiting this instant-reaction behavior with fake pop-up messages that look strikingly similar to real CAPTCHA tests.
Here, too, users are asked to click on a box to solve a test. However, when you click on that box, you end up redirected to other pages. Further actions ensure that dangerous commands are copied to your clipboard, making it possible for attackers to run those dangerous
|
