PDF Phishing Fiasco: Fake CAPTCHAs Fuel Lumma Stealer Malware Mayhem
Netskope Threat Labs uncovered a phishing campaign using fake CAPTCHA images in PDFs to deliver Lumma Stealer malware. By leveraging SEO, attackers trick victims into visiting malicious sites disguised as PDF documents, targeting over 260 domains. The campaign has affected more than 7,000 users since 2024.
Hot Take:
**_Phishers have gone all ‘fake CAPTCHA’ on us, creating a wild goose chase for PDFs that are more trap than treasure. Apparently, the new way to snag your credit card info is by pretending to be a helpful PDF guide. Who knew that searching for a user manual could end in a malware misadventure? It’s PDF-initely a phishing frenzy out there!_**
Key Points:
– Over 260 domains are hosting close to 5,000 phishing PDFs.
– Attackers use SEO techniques to lure victims via search engine results.
– Fake CAPTCHA images in PDFs are used to trick users into running malicious commands.
– The Lumma Stealer malware is deployed through this phishing method.
– Technology, financial services, and manufacturing sectors are the primary targets.