Tag: fake captcha

1 article

Developer workstation with laptop showing npm package page amidst coffee cups and notes, hinting at CAPTCHA scam.

npm Packages Host Fake Cloudflare CAPTCHA Pages via Unpkg Mirrors

Researchers uncovered a sneaky scam where attackers hide a fake Cloudflare CAPTCHA page inside harmless-looking npm packages, using mirrors to trick victims into revealing sensitive info. This clever tactic relies on exploiting trusted domains to deploy a ClickFix-style scam that redirects users to attacker-controlled infrastructure.

Analyst 207