Description
FakeCaptcha refers to malicious websites that display fake CAPTCHA verification pages to trick users into enabling notifications or downloading malware. The scheme walks victims through a series of clicks that end with pasted commands or installed payloads, and it underpins ClickFix and similar social engineering techniques that bypass email and browser defenses. Cyberattackers use it to deliver information stealers such as LummaStealer and remote access trojans, and campaign infrastructure rotates rapidly to survive takedowns.
Stats
- First seen
- November 2024
- Last seen
- October 2026
Also known as
Fakecaptcha
Alert name variants
| Alert Name |
|---|
| Document-HTML.Malware.FakeCaptcha |
| Document-HTML.Trojan.Fakecaptcha |
| Document-HTML.Trojan.FakeCaptcha |
| Document-PDF.Trojan.FakeCaptcha |
| Generic.HTML.FakeCaptcha.A.C3FD94C0 |
| Generic.HTML.FakeCaptcha.B.370E21BA |
| Generic.HTML.FakeCaptcha.B.830C7B07 |
| Generic.HTML.FakeCaptcha.B.ED5E685C |
| Generic.HTML.FakeCaptcha.B.FDE6F568 |
| GT:JS.FakeCaptcha.1.E6B25E2B |
