Hackers Use Fake CAPTCHA Schemes to Steal Info on Devices

Cybercriminals trick users into downloading malware by posing as CAPTCHA verification

Apr. 17, 2026 at 9:12pm

Got story updates? Submit your updates here. ›

A highly detailed 3D illustration of a glowing, neon-lit computer motherboard with intricate circuitry and pulsing data streams. The board is partially obscured by a transparent, holographic CAPTCHA verification interface, symbolizing the intersection of cybersecurity and hacking threats.Hackers exploit CAPTCHA vulnerabilities to infiltrate devices with malware, exposing users to data theft and fraud.Today in Tampa

Hackers are using fake CAPTCHA pages to trick users into downloading malware that steals passwords, login info, cookies, and screenshots from their devices. The 'StealC' virus is activated when users follow instructions to open a command box and paste a script, believing they are fixing a CAPTCHA error. Experts warn users to be wary of any CAPTCHA pages that ask them to perform unusual actions, and recommend using passkeys and multi-factor authentication to stay safe.

Why it matters

CAPTCHA verification is a common security measure used across the internet, so these fake CAPTCHA schemes have the potential to impact a wide range of users. The StealC virus can give hackers access to sensitive personal and financial information, putting victims at risk of identity theft and fraud.

The details

According to the Identity Theft Resource Center, a normal CAPTCHA typically just asks users to click a button and perform a photo match or fill in a text box. However, the fake CAPTCHA pages instruct users to hit a specific set of keys, like Windows Key + R, then Ctrl +V, in order to 'fix' an alleged error. In reality, this opens a command box and pastes a script that downloads the StealC malware onto the user's device.

  • The Identity Theft Resource Center reported on this new CAPTCHA-based hacking scheme in April 2026.

The players

Identity Theft Resource Center

A nonprofit organization that provides assistance to victims of identity theft and promotes consumer education.

Got photos? Submit your photos here. ›

What’s next

The Identity Theft Resource Center recommends that anyone who may have fallen victim to this CAPTCHA scam should immediately disconnect their device from the internet, change all passwords on a clean device, and scan their system for viruses. The ITRC also provides assistance to affected individuals.

The takeaway

This new CAPTCHA-based hacking scheme highlights the importance of user vigilance when encountering any unusual verification prompts online. By tricking users into downloading malware, these cybercriminals can gain access to sensitive personal and financial information, underscoring the need for robust cybersecurity measures like passkeys and multi-factor authentication.