From Infosecurity Magazine: "New research from Barracuda Networks has revealed that cyber-criminals are increasingly using official reCAPTCHA walls to disguise malicious content from email security systems and trick unsuspecting users." Read more here.
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgYvQPBSOLLTRM4Y1oloQDM4CE6_V5z61sf5vSQ4CXCrz9YDSWYTx1NW-_S7YlpqjnTHwsAv_TM2U1hAIjc4WaTcNp-NdpvWnf7xI6d74xnKntarU_mAPDhIRXKOztCnQPuBDoi/s320-rw/newCaptchaAnchor.gif)
In the meantime, it's important that users stay vigilant, as even before this challenge there's always going to be some bad content or other that gets past a filter. Be careful what you click on and be sure to check URLs of any site where you may be entering login credentials. (And a password tool such as LastPass can help with this sort of thing as well; it'd only populate your credentials in a site with the correct domain name, not suggesting a user/password entry on a fake domain name that it doesn't recognize.)
[ H/T: Slashdot ]
1
Comments
I've definitely seen this behavior from bad actors in the wild before.They put CAPTCHAs on landing pages before they push the user off to a phishing page, malware, or some other dubious destination.
ReplyDelete