Get the latest tech news
Fake captcha attacks are increasing, say experts
CISOs need to warn employees in regular awareness training to refuse to copy and execute so-called verification login scripts.
Several cybersecurity firms have published alerts about threat actors fooling customer employees into downloading malware through fake captcha login verification pages. The latest trick is to change the script to be pasted from computer code — which might look suspicious — into a verification sentence with a smiley emoji or a checkmark, to dupe the user into thinking they’re doing the right thing. “If you apply that policy on non-administrator and non development machines, it should stop regular users from being able to run malware using this specific technique,” he said, Disable the ability of browsers on employee PCs to save passwords.
Or read this on r/technology
