That weird CAPTCHA could be a malware trap - here's how to protect yourself

A new malware campaign is utilizing the CAPTCHA verification process to trick unsuspecting users into divulging their sensitive data. Research by Malwarebytes reveals that these attacks often prompt users with familiar CAPTCHA challenges, making it easy for less knowledgeable victims to fall into the trap. When users comply with the CAPTCHA requirements, their clipboard is manipulated to execute a command (Mshta.exe) that allows cybercriminals to download malicious files, bypassing typical security measures. This strategy highlights the need for heightened awareness among internet users regarding cybersecurity.

This malware campaign exploits the CAPTCHA process, luring victims into unintentionally allowing access to their data while believing they are verifying their identity.

Once the user engages with the CAPTCHA, a seemingly harmless command is executed in the background, which allows cybercriminals to steal sensitive information.

Read at ZDNET