{"id":3172,"date":"2025-04-28T13:50:05","date_gmt":"2025-04-28T20:50:05","guid":{"rendered":"https:\/\/blogs.ufv.ca\/itservices\/?p=3172"},"modified":"2025-04-28T13:50:05","modified_gmt":"2025-04-28T20:50:05","slug":"fake-captcha-pages-spreading-malware","status":"publish","type":"post","link":"https:\/\/blogs.ufv.ca\/itservices\/2025\/04\/fake-captcha-pages-spreading-malware\/","title":{"rendered":"Fake CAPTCHA pages spreading malware"},"content":{"rendered":"

There is a sneaky new technique to get malware onto your system;<\/strong> attackers are now creating fake CAPTCHA pages to trick you into running commands that will compromise your device.<\/p>\n

You’re probably familiar with CAPTCHA challenges. Websites use them to distinguish humans from bots, often with a “verify you are human” checkbox or a task like making you select all the bicycles in the squares. But recently, attackers have been creating fake CAPTCHA challenges that trick you into running malicious commands instead.<\/span><\/p>\n

These fake CAPTCHA pages appear on ordinary websites that have been hacked, or illegitimate websites pushed through ads.
\n<\/span><\/p>\n

Example of fake CAPTCHA steps:<\/strong><\/span><\/p>\n

    \n
  1. Press Win + R\u00a0 (this opens the Run dialog box);<\/em><\/li>\n
  2. Press CTRL + V\u00a0 (the website places text into the clipboard – invisible to you – and this step pastes the contents from the clipboard into the text field of the Run box);<\/em><\/li>\n
  3. Press Enter\u00a0 (this executes the code you pasted into the Run box, and downloads the malware).<\/em><\/span><\/li>\n<\/ol>\n

    How to recognize a fake CAPTCHA:<\/strong><\/span><\/p>\n