Collaborate Disseminate
This week, we delve into the dark world of fake CAPTCHAs designed to hijack your computer. Plus, the AI safety clock is ticking down – is doomsday closer than we think? And to top it off, we uncover the sticky situation of Krispy Kreme facing a ransomw… Continue reading Smashing Security podcast #398: Fake CAPTCHAs, Harmageddon, and Krispy Kreme
Malicious CAPTCHA distributed through ad networks delivers the Amadey Trojan or the Lumma stealer, which pilfers data from browsers, password managers, and crypto wallets. Continue reading Lumma/Amadey: fake CAPTCHAs want to know if you’re human
Lumma Stealer malware uses fake CAPTCHA to deceive victims. This information-stealing malware targets sensitive data like passwords and… Continue reading Fake CAPTCHA Pages Used by Lumma Stealer to Spread Fileless Malware
There was movement in the “AM Radio in Every Vehicle Act” last week, with the bill advancing out of the US House of Representatives Energy and Commerce Committee and heading …read more Continue reading Hackaday Links: September 29, 2024
Many GitHub users this week received a novel phishing email warning of critical security holes in their code. Those who clicked the link for details were asked to distinguish themselves from bots by pressing a combination of keyboard keys that causes Microsoft Windows to download password-stealing malware. While it’s unlikely that many programmers fell for this scam, it’s notable because less targeted versions of it are likely to be far more successful against the average Windows user. Continue reading This Windows PowerShell Phish Has Scary Potential
A new phishing campaign uses fake CAPTCHA verification pages to trick Windows users into running malicious PowerShell commands,… Continue reading Fake CAPTCHA Verification Pages Spreading Lumma Stealer Malware
I implement a .NET application that has a HTTPS API. A website makes requests to my HTTPS API. The website has a login page and other features.
Do I show a Captcha on the website if a new session is created? Do I show a Captcha on the webs… Continue reading Best timing/safest way to show Captchas on a website?
About a year ago, my reCAPTCHA for creating uers seemed to get completely bypassed by a hacker, who created thousands of users in a small time frame, here are checks I did:
I reviewed all the queries that insert new entries into my databa… Continue reading My reCAPTCHA got bypassed
I implemented reCaptcha on my react native app to stop bots from creating accounts. However this reCAPTCHA got bypassed. and the hacker was able to create 10-20 thousand accounts in like a week. I really tried bypassing it myself, but I co… Continue reading My reCAPTCHA for registering got bypassed
I implemented recaptcha on my site on a page that has a form. A bot is programatically posting the form to my server with fields filled out appropriately and a fake g-recaptcha-response value (it does not interact with the recaptcha widget… Continue reading Recaptcha – fake token in posted form