ReCAPTCHA Scam
Cybercriminals are using reCAPTCHA to install malware on people's devices.
Everyone is familiar with reCAPTCHA prompts, whether it is checking the “I’m not a robot” box or selecting images of traffic lights to prove you are human. These tools are designed to detect bots, reduce spam, and add another layer of fraud protection. Unfortunately, cybercriminals are constantly finding new ways to take advantage of familiar technology, and now they are targeting reCAPTCHA.
Scammers have created fake reCAPTCHA pages to trick users into downloading malware or revealing sensitive login information. In one recent scam, users are prompted to type a series of keys as part of the verification process. What looks harmless is actually a command that can download malware onto the device. Once installed, that malware may steal passwords, login credentials, and even banking information.
Tips to stay safe:
- Real reCAPTCHA prompts will not ask you to enter a sequence of keyboard commands. If you see this, leave the website immediately.
- Slow down and pay close attention. Cybercriminals often rely on people moving too quickly and not noticing the warning signs.