Scammers have weaponised one of the internet's most trusted security features. A growing fake CAPTCHA scheme, flagged by the Identity Theft Resource Center, tricks users into installing StealC malware by disguising commands as legitimate verification prompts.

The attack bypasses download warnings, pop-up blockers, and traditional phishing red flags, requiring nothing but keyboard input.

How does fake CAPTCHA scam work?

A normal-looking website shows a CAPTCHA box, the sort users see every day on banking pages and login screens. But instead of tapping pictures........

© The News International