Israel's National Digital Directorate warned Friday of a new cyberattack campaign dubbed 'ShadowCaptcha', which has been detected in 45 countries, including Israel. The attack involves compromised legitimate websites displaying a fake 'I'm not a robot' verification screen that prompts users to copy and paste a malicious command, potentially allowing attackers to take control of the computer.
The National Digital Directorate on Friday provided additional details on a cyberattack campaign first reported by The Zioneer earlier today. The campaign, named 'ShadowCaptcha', has been detected in 45 countries, including Israel. The attack involves compromised legitimate websites that display a fake CAPTCHA verification screen, instructing users to copy and paste a command into their computer, which can grant attackers remote control.
At 12:47 Jerusalem, The Zioneer reported the directorate's initial warning about the fake CAPTCHA scam, without naming the campaign or specifying its geographic scope. The new details indicate a broader and more organized campaign.
The directorate advised users to remain vigilant and verify the authenticity of CAPTCHA prompts before following any instructions. No further details on specific targets in Israel or the origin of the campaign have been released.
2 developments
- DevelopingNational Cyber Directorate warns of fake Israel Post website stealing personal data
- DevelopingNational Cyber Directorate warns of phishing scam impersonating SharePoint document sharing
- DevelopingPhishing scam impersonating GOV.IL exploits phone display features; authorities say no system breach
- DevelopingNational Digital Directorate, Elections Committee hold joint meeting on cybersecurity, AI content ahead of 26th Knesset elections
Source and signal
- Open-source intake