Cybersecurity researchers are highlighting a new malware campaign that uses fake CAPTCHA verification checks to deliver the notorious Lumma information stealer. Cybercriminals trick users by presenting fakeCAPTCHA verification checks that look like the real ones you often see online. When users encounter these fake CAPTCHAs, they are asked to prove they are human by clicking a button or following specific instructions. However, instead of just verifying their identity, these actions secretly trigger a harmful process. The fake CAPTCHA prompts users to copy and paste a malicious script into their computers command line, which then installs the Lumma information stealer. This malware silently collects sensitive information like login credentials, banking details, and personal files from the infected device, potentially leading to identity theft and financial loss.

With this malware campaign spanning several countries and multiple industries, the experts at ISEC7 would like to share our updated guidance when it comes to authentication. First, it's crucial to stay vigilant and cautious online; always be skeptical of CAPTCHAs that ask you to perform unusual actions, such as copying and pasting commands or running scripts. Legitimate CAPTCHAs typically only require you to identify images or enter text. It’s also always best to use multi-factor authentication (MFA), which requires you to provide two or more verification factors to gain access. By combining multiple forms of authentication, MFA reduces the risk of identity theft, data breaches, and other cyberthreats. However, using an authenticator app for MFA is generally more secure than relying on text messages, as authenticator apps generate unique, time-based codes directly on your device, making it much harder for cybercriminals to intercept them. Lastly, don’t forget the tried and true precautions of ensuring your antivirus and anti-malware software is up to date, as these tools can help detect and block malicious activities, and regularly updating your operating system and applications to patch any vulnerabilities
that could be exploited by malware.

With the cyberthreat landscape and business needs always changing, it’s a good idea to periodically reassess your security posture. The team at ISEC7 can provide an objective assessment of what can address the needs of your organization and/or risk mitigation needed to enhance your current solution. Feel free to contact us for consultation or if you have any questions as your organization reviews its
security posture.