Don't Be Fooled! Here's How To Recognize And Avoid Fake CAPTCHA

JAKARTA - Kaspersky has identified a new cyberattack scenario that uses CAPTCHA. Where the user will be directed to a fake CAPTCHA page after clicking a hidden ad that looks like a Chrome or CAPTCHA error page.

The striker bought several ad slots, and if users see these ads and click them, they will be directed to malicious resources, which is a common attack tactic, "said Vasily Kolesnikov, Security Expert at Kaspersky.

When users click fake CAPTCHA, the PowerShell command on their board is active without realizing it. If implemented, this command downloads malware that searches for crypto files, cookies, password data, and accesses e-commerce sites for the attacker's financial gain.

Kaspersky also found that the new wave of attacks not only targeted gamers, but also other groups, and distributed through file sharing services, web apps, bookmaker portals, adult content pages, anime communities, and other channels.

To block threats related to steamers, follow the recommendations below.

Company:

Individual: