Fake CAPTCHAs and Phishy PDFs: The Cybercrime Comedy Show You Didn’t Ask For!
Cybersecurity researchers have uncovered a phishing campaign using fake CAPTCHA images to deliver Lumma Stealer malware. Hosted on Webflow’s CDN, these PDFs trick users into downloading malware. With 260 domains and 5,000 phishing files, attackers use SEO tactics and fake CAPTCHAs to target victims across North America, Asia, and Southern Europe.
Hot Take:
Who knew fake CAPTCHAs could be more annoying than real ones? This phishing campaign serves up a buffet of deception, cleverly mixing SEO magic with malware trickery. It’s like a bad buffet, where everything looks appetizing but leaves you with a stomachache and a compromised computer.
Key Points:
- Fake CAPTCHAs in PDFs on Webflow’s CDN lead to Lumma Stealer malware.
- 5,000 phishing PDFs across 260 domains target over 7,000 users.
- SEO manipulation tricks users into clicking malicious links.
- Lumma Stealer logs are shared for free on a new hacking forum.
- Phishing also uses JavaScript with invisible Unicode characters.
Already a member? Log in here