Fake CAPTCHA verification Alart

[Comeacross]

I saw this image pop up on my timeline today while surfing social media. It's worth sharing here to create awareness about it so people can avoid it.



At first glance it looks like a normal reCaptcha verification but the instructions to complete the verification is a trick to infect your device and have access to your data.

The instruction asks you to press Win+R keys on your device (if you press it, window run dialog will open)
Ctrl+V (control V normally paste what you copy. So pressing this keys will paste the malicious command the fake site copied to your clipboard without your consent.)
Pressing Enter key automatically runs the malwares.

Once you follow this process to complete what looks like a verification, you just grant scammers permission to have access to your files. Now you need a little computer knowledge to stay safe.

If any verification asks you to open run, command prompt or Powershell, just know that it's a trick and you should never proceed with such verification.

Real verification only asks you check a box, click on images or drag images to prove you are not a robot. Any verification that tells you to press keyboard shortcuts is a red flag.

[tbct_mt2]

I saw this image pop up on my timeline today while surfing social media. It's worth sharing here to create awareness about it so people can avoid it.



At first glance it looks like a normal reCaptcha verification but the instructions to complete the verification is a trick to infect your device and have access to your data.

The instruction asks you to press Win+R keys on your device (if you press it, window run dialog will open)
Ctrl+V (control V normally paste what you copy. So pressing this keys will paste the malicious command the fake site copied to your clipboard without your consent.)
Pressing Enter key automatically runs the malwares.

I will try to do my mini homework if anything requires me doing these steps, if I don't know functions of those key combinations, I will search what they mean before considering to do required steps or not.

But surely that is a very stranger verification guide, and honestly I didn't know about it if you did not share. Certainly, if I see it by myself somewhere, on my devices, I will ignore it and will not do required steps.

Lastly, it will be time for me to seriously check my devices, even wipe out the operating system for better security and safety of sensitive and valuable things on the devices.

[promise444c5]

Think about it.. why would a Captcha Verification require interaction directly with your  LM ?
It’s been discussed on this board before, it runs a command that invite malware into your PC through your windows terminal.

[un_rank]

I wonder what websites one will be attempting to assess to end up here. If you come across such a captcha pop up chances are you are already at some level of risk even if you do not follow the steps and should review your browsing history and habits.

First glance here should tell anyone that this a scam but if that does not, then the redirect page you see when you try the first command should.

- Jay -

[benjaminmin]

I can provide a tutorial like that