SecuriTricks - captcha

Chasing Eddies: New Rust-based InfoStealer used in CAPTCHA campaigns

A novel Rust-based infostealer called EDDIESTEALER has been discovered, distributed through fake CAPTCHA campaigns. The malware uses deceptive verification pages to trick users into executing a malicious PowerShell script, which deploys the infostealer. EDDIESTEALER targets sensitive data including…

powershell

infostealer

Published: May 29, 2025

Downloadable IOCs: 27

Caught in the CAPTCHA: How ClickFix is Weaponizing Verification Fatigue to Deliver RATs & Infostealers

Threat actors are exploiting user fatigue with anti-spam mechanisms through a technique called ClickFix. This method involves compromising websites and embedding fraudulent CAPTCHA images, which, when solved by unsuspecting users, lead to the execution of malicious code. The attack chain typically …

Published: May 22, 2025

Downloadable IOCs: 10

Yet Another NodeJS Backdoor (YaNB): A Modern Challenge

A resurgence in malicious campaigns exploiting deceptive CAPTCHA verifications has been observed, tricking users into executing NodeJS-based backdoors and deploying sophisticated Remote Access Trojans. The attack begins with a malicious NodeJS script connecting to attacker-controlled infrastructure…

system reconnaissance

Published: May 16, 2025

Downloadable IOCs: 11

Russian COLDRIVER Hackers Deploy LOSTKEYS Malware to Steal Sensitive Information

The Google Threat Intelligence Group has identified a sophisticated malware called LOSTKEYS, attributed to the Russian government-backed threat actor COLDRIVER. Active since December 2023, LOSTKEYS represents an evolution in COLDRIVER's toolkit, targeting high-value entities such as NATO government…

multi-stage infection

ngo

lostkeys

2025-05-10

intelligence collection

russian hackers

western governments

Published: May 10, 2025

Downloadable IOCs: 0

New Evasive Campaign Delivers LegionLoader via Fake CAPTCHA & CloudFlare Turnstile

A new malicious campaign has been discovered targeting users searching for PDF documents online. The attack uses fake CAPTCHAs and CloudFlare Turnstile to deliver LegionLoader malware, which then installs a malicious browser extension. The infection chain involves a drive-by download, execution of …

Published: April 5, 2025

Downloadable IOCs: 5

Rivers of Phish: Sophisticated Phishing Targets Russia's Perceived Enemies Around the Globe

An extensive investigation uncovered an elaborate phishing campaign conducted by a Russia-based threat actor known as COLDRIVER, attributed to Russia's Federal Security Service. The campaign employed personalized social engineering tactics to target civil society groups, NGOs, journalists, and gove…

Published: August 14, 2024

Downloadable IOCs: 28

Tag: captcha

Attack reports

Chasing Eddies: New Rust-based InfoStealer used in CAPTCHA campaigns

Caught in the CAPTCHA: How ClickFix is Weaponizing Verification Fatigue to Deliver RATs & Infostealers

Yet Another NodeJS Backdoor (YaNB): A Modern Challenge

Russian COLDRIVER Hackers Deploy LOSTKEYS Malware to Steal Sensitive Information

New Evasive Campaign Delivers LegionLoader via Fake CAPTCHA & CloudFlare Turnstile

Proactive ClickFix Threat Hunting with Hunt.io

SVG Phishing Malware Being Distributed with Analysis Obstruction Feature

The rising threat of social engineering through fake fixes

DeepSeek Lure Used To Spread Malware

ClickFix Scam Exposed! Protect Your Data Before It's Too Late

Infostealer LummaC2 Spreading Through Fake CAPTCHA Verification Page

Malicious CAPTCHA delivers Lumma and Amadey Trojans

Tricks and Treats: New Pixel-Level Deception

A Measure of Motive: How Attackers Weaponize Digital Analytics Tools

Rivers of Phish: Sophisticated Phishing Targets Russia's Perceived Enemies Around the Globe