SCAM OF THE WEEK: "ARE YOU HUMAN?" NEW ATTACK USES A CAPTCHA AS CAMOUFLAGE
Posted
on Friday, August 28, 2020
in
Privacy & Security
Have you ever found yourself staring at a wobbly letter trying to decide if it is an X or a Y, just to 
prove to a website that you're not a robot? This is a funny little test called a CAPTCHA and it is used to help prevent automatic malicious software known as "bots", from accessing sensitive information. Unfortunately, cybercriminals are now using CAPTCHAs as a way to make their phishing scams seem more legitimate.
In a recent Netflix-themed attack, scammers are sending a phishing email that claims "your payment did not go through and your account will be suspended in the next 24 hours". To resolve the issue, you're instructed to click on a link in the email to update your information. If you click the link, you're redirected to an unrelated webpage that looks like a Netflix login page. Here you're asked to enter your username and password, your billing address, and your credit card information. Don't be fooled! Anything entered here is sent directly to the cybercrimnals.
Remember these tips:
- Phishing emails are often designed to create a sense of urgency. In this case, "your account will be suspended in the next 24 hours"! Think before you click. The bad guys rely on impulsive clicks.
- When an email asks you to log in to an account or onlineservice, log in to your account through your browser and not by clicking the link in the email. That way, you can ensure you're logging into the real website and not a phony look alike.
- Remember, anyone can create a CAPTCHA webpage, so don't fall for this false sense of security.
Stop, Look, and Think. Don't be fooled.
The knowBe4 Security Team
KnowBe4.com