Attackers use Fake CAPTCHAs to Deploy Lumma Stealer RAT

Summary: HP’s latest Threat Insights Report highlights a rise in malicious CAPTCHA campaigns that deceive users into executing PowerShell commands, leading to the installation of the Lumma Stealer remote access trojan (RAT). The report emphasizes the dangers of increased click tolerance among users and outlines various tactics used by attackers, including the distribution of other RATs through social engineering. It warns organizations of the evolving threat landscape and the need for proactive cybersecurity measures.

Affected: HP customers and organizations using email and web services

Keypoints :

• Surge in malicious CAPTCHA campaigns trick users into executing harmful commands.
• Attackers utilize social engineering in Word and Excel documents and SVG images to deliver malware.
• 11% of email threats bypassed existing gateway scanners, indicating a significant security gap.