CAPTCHA – Computer Security Articles

This Windows PowerShell Phish Has Scary Potential

September 19, 2024 admin A Little Sunshine, CAPTCHA, GitHub, Latest Warnings, lumma stealer, microsoft powershell, Virustotal.com, Web Fraud 2.0

Credit to Author: BrianKrebs| Date: Thu, 19 Sep 2024 19:39:09 +0000

Many GitHub users this week received a novel phishing email warning of critical security holes in their code. Those who clicked the link for details were asked to distinguish themselves from bots by pressing a combination of keyboard keys that causes Microsoft Windows to download password-stealing malware. While it’s unlikely that many programmers fell for this scam, it’s notable because less targeted versions of it are likely to be far more successful against the average Windows user.

MalwareBytes Security

PetSmart warns customers of credential stuffing attack

March 7, 2024 admin CAPTCHA, data breach, monitoring, news, personal, petsmart, rate limiting, throttling

Pet retail company PetSmart has emailed customers to alert them to a recent attack that used reused passwords.

MalwareBytes Security

Phishing campaigns are using AMP URLs to avoid detection

August 3, 2023 admin amp, awareness, CAPTCHA, news, phishing, redirection, URL

Categories: Awareness

Categories: News

Tags: phishing

Tags: amp

Tags: url

Tags: captcha

Tags: redirection

Researchers have found a new phishing tactic that uses Google Accelerated Mobile Pages (AMP) URLs to look trustworthy

MalwareBytes Security

Gmail-linked Facebook accounts vulnerable to attack using a chain of bugs—now fixed

May 17, 2022 admin CAPTCHA, csrf, Exploits and vulnerabilities, Facebook, Gmail, iframe, linked accounts, myopenid, OAuth, sandbox, sop, unlink, XSS, youssef sammouda

Credit to Author: Pieter Arntz| Date: Tue, 17 May 2022 19:37:25 +0000

A researcher has combined a chain of bugs into an attack method that makes it possible to take over Facebook accounts linked to Gmail.

The post Gmail-linked Facebook accounts vulnerable to attack using a chain of bugs—now fixed appeared first on Malwarebytes Labs.

MalwareBytes Security

Fake reCAPTCHA forms dupe users via compromised WordPress sites

May 16, 2022 admin CAPTCHA, JavaScript, local.drakefollow.com, push notifications, recaptcha, web threats, wordpress

Credit to Author: Pieter Arntz| Date: Mon, 16 May 2022 11:54:12 +0000

Threat actors have launched a new campaign that starts with compromised WordPress sites and leads to fake reCAPTCHA sites designed to get visitors to accept web push notifications.

The post Fake reCAPTCHA forms dupe users via compromised WordPress sites appeared first on Malwarebytes Labs.

MalwareBytes Security

Drive-by cryptomining campaign targets millions of Android users

February 12, 2018 admin Android, Bot, CAPTCHA, coinhive, crypto mining, cryptomining, drive-by, Threat analysis

Credit to Author: Jérôme Segura| Date: Mon, 12 Feb 2018 14:00:24 +0000

Android users have been exposed to drive-by cryptomining in one of the largest campaigns that we have detected so far.

Categories:

Threat analysis

Tags: Android Bot CAPTCHA coinhive crypto mining cryptomining drive-by

Independent MotherBoard Security

This Machine Kills CAPTCHAs

October 26, 2017 admin AI, CAPTCHA, recaptcha, Recursive Cortical Network, University of Maryland

Credit to Author: Daniel Oberhaus| Date: Thu, 26 Oct 2017 18:58:05 +0000

A new type of neural network has cracked a device specifically meant to differentiate humans and machines.

Microsoft Security

Where’s the Macro? Malware authors are now using OLE embedding to deliver malicious files

January 23, 2017 admin Antimalware research for IT pros and enthusiasts, CAPTCHA, Cerber, Donvibs, macro malware, Macro-based malware, malicious JS scripts, malicious VB files, Microsoft Office, office, OLE-embedded objects, ransomware, TrojanDownloader:VBS/Donvibs, TrojanDownloader:VBS/Vibrio, Vibrio

Recently, we’ve seen reports of malicious files that misuse the legitimate Office object linking and embedding (OLE) capability to trick users into enabling and downloading malicious content. Previously, we’ve seen macros used in a similar matter, and this use of OLE might indicate a shift in behavior as administrators and enterprises are mitigating against this…