We are all used to CAPTCHA’s, those check boxes and picture matching tasks that prove you are a human. Scammers have found a way to steal the information from your computer by pretending to use a CAPTCHA.
A true CAPTCHA has you click on a box, or type letters or numbers
just as they appear on the screen, or match pictures of objects. The fake
CAPTCHA has you type a specific sequence of keys. A common sequence is the
Windows Key+ R then Ctrl+ V. The sequence is a series of commands to your
computer to download a script that downloads a virus onto your computer. The
virus can then copy your email account login information, mobile banking
credentials, or other information.
Legitimate CAPTCHA’s will NOT ask you to,
·
Run commands on a device
·
Open the Windows Run dialog
·
Paste text into a command box
·
Download files
·
Install software
·
Enable special permissions
If a website asks you to open a “Run” box or paste computer code,
close the window immediately. Legitimate CAPTCHA’s will not ask you to run code
or download anything as part of their verification that you are a human.
If you do follow keyboard prompts and think you have been infected,
take the following actions:
·
Disconnect from the internet. Turn off Wi-Fi or unplug your
internet cable. This cuts off the data link between you and the scammer.
·
Scan your device for viruses.
·
Change the password for the account that you were trying to access
when the fake CAPTCHA window popped up. Use a clean device, such as your phone,
to do the change.
·
Check your bank statements for any charges that you do not recognize.
Identity Theft Resource Center:
https://www.idtheftcenter.org/post/new-captcha-scam/
Federal Trade Commission:
https://consumer.ftc.gov/consumer-alerts/2026/06/how-spot-captcha-scam
CBS News:
https://www.cbsnews.com/philadelphia/news/fake-captcha-scams/
No comments:
Post a Comment