News: scam
The risk of fake CAPTCHAs
We’ve all seen CAPTCHA prompts before, the ones asking you to click on images with traffic lights or type some squiggly letters to prove you’re human. But a sneaky scam is making the rounds again, these are fake CAPTCHA pages that trick you into running malicious code on your device. It’s part of a social engineering tactic known as ClickFix.
How does it work?
You might visit a website (often from a phishing email or pop-up) and see what looks like a normal CAPTCHA, but after clicking the checkbox, it requests a few extra steps, for example:
Beware of COVID-19 phishing
Scammers regularly seek to capitalise on topical issues to trap people into responding to fake emails, text messages and ads.