Cybercriminals utilize fake CAPTCHA prompts to deploy malware
Scammers are using deceptive CAPTCHA pop-ups to trick users into executing commands that install spyware and steal sensitive credentials.
A growing cyber threat involves the use of malicious CAPTCHA prompts to compromise user devices. These fake interfaces, often found on fraudulent websites, instruct victims to execute specific keyboard shortcuts that paste malicious scripts into system utilities like the Windows Run dialog or the macOS Terminal.
Once executed, these commands facilitate the silent installation of keyloggers and spyware. This software allows attackers to harvest usernames, passwords, and sensitive personal information, which are subsequently exploited for financial crimes.
Security experts emphasize that legitimate CAPTCHA tests are designed solely for web verification and never require users to interact with command-line interfaces or system-level shortcuts. Users who encounter such prompts are advised to immediately disconnect from the network and utilize security software to scan for infections.