University Students Warned of Malware Attack Through Deceptive CAPTCHA, Affecting Millions, According to Report
In the world of digital finance, we've got you covered! Here's the lowdown on the latest scams, hacks, and data breaches in the crypto sphere.
Fake CAPTCHA Trick: Here's a stealthy scam that's been fooling millions of college students and instructors worldwide. The culprit is a clever fake CAPTCHA deployed on a popular student engagement platform, iClicker, which is routinely used in thousands of universities across the globe.[1]
The iClicker platform enables instructors to handle attendance, ask live questions or surveys, and track student engagement. Unfortunately, the unsuspecting users who clicked on this phony CAPTCHA were allowing a PowerShell command to hide on their devices. Once they followed the instructions to execute the command, they let malware onto their systems, potentially giving attackers control over their devices.[2]
In response to the incident, the iClicker team addressed the issue:"We've sorted out an issue affecting our iClicker landing page (iClicker.com). Essentially, a third party added the fake CAPTCHA to our page. This third party hoped to trick users into clicking on the false CAPTCHA, much like the phishing emails we often encounter nowadays.
As a precaution, we recommend that any faculty or student who encountered and clicked on the false CAPTCHA from April 12th to April 16th on our website run security software to ensure their devices remain protected."
Stay smart out there, and remember to keep an eye out for fishy links and shady commands!
Tune in to our daily updates on X, Facebook, and Telegram, or sign up for email alerts—let us help you stay ahead of the game!
[1] Bleeping Computer[2] University of Michigan's Safe Computing team[3] Protect your devices[4] Avert future attacks
In the realm of altcoins and cryptocurrency, this CAPTCHA trick serves as a reminder of the hidden threats within blockchain-based finance. Remain vigilant against fishy links and shady commands, and remember to keep your security software updated to avert future attacks. For daily cryptocurrency and finance updates, follow us on X, Facebook, and Telegram, or sign up for email alerts - let us help you navigate the crypto sphere with caution.
