Zum Inhalt der Seite gehen

Suche

Beiträge, die mit captcha getaggt sind

Fake CAPTCHA PDFs spread Lumma Stealer via Webflow, GoDaddy & other Domains.

IT-Security researchers have uncovered a widespread phishing campaign that uses fake CAPTCHA images shared via PDF documents hosted on Webflow's content delivery network (CDN) to deliver the Lumma stealer malware.

https://www.netskope.com/blog/fake-captchas-malicious-pdfs-seo-traps-leveraged-for-user-manual-searches

#fake #captcha #pdf #phishing #campaign #it #security #privacy #engineer #media #tech #news
Netskope Threat Labs said it discovered 260 unique domains hosting 5,000 phishing PDF files that redirect victims to malicious websites. "The attacker uses SEO to trick victims into visiting the pages by clicking on malicious search engine results," security researcher Jan Michael Alcantara said in a report. "While most phishing pages focus on stealing credit card information, some PDF files contain fake CAPTCHAs that trick victims into executing malicious PowerShell commands, ultimately leading to the Lumma Stealer malware." The phishing campaign is estimated to have affected more than 1,150 organizations and more than 7,000 users since the second half of 2024, with the attacks primarily singling out victims in North America, Asia, and Southern Europe across technology, financial services and manufacturing sectors.

Fake CAPTCHAs, Malicious PDFs, SEO Traps Leveraged for User Manual Searches - Netskope

Summary On February 12, 2025, Netskope Threat Labs reported a widespread phishing campaign using fake CAPTCHA images via Webflow CDN to trick victims
Jan Michael Alcantara (Netskope)
#news #privacy #tech #media #fake #security #phishing #it #engineer #captcha #pdf #campaign

⇧