Pirated or cracked versions of games have long been a hotbed for malware distribution, and cybercriminals are now using CAPTCHA challenges to make their attacks even more effective.
According to a recent report by McAfee Labs, attackers are leveraging CAPTCHA to trick users into thinking that malicious websites or downloads are legitimate. Security researchers first detected the use of CAPTCHAs in malware delivery schemes last month.
Since then, this technique has rapidly gained traction, with reports indicating a growing number of users encountering it worldwide. McAfee’s data suggests that this method of attack is becoming increasingly prevalent, putting more individuals at risk across different regions.
This method is common in pirated games, where users may already expect to jump through extra hoops, like bypassing verification systems. When users search for cracked versions of popular games, they often end up on shady websites. These sites commonly use CAPTCHAs to appear more credible, creating the illusion that the files or content being offered are secure. After solving the CAPTCHA, users are redirected to download a file that is typically riddled with malware, in this case, Lumma Stealer.
Lumma Stealer is a sophisticated information-stealing malware that surfaced in 2022. It targets sensitive data like login credentials, browser cookies, saved passwords, and information from file transfer protocol (FTP) clients and cryptocurrency wallets.
The malware stealthily collects this data from infected systems and transmits it to remote servers controlled by attackers. Its ability to steal from major web browsers, including Chrome, Firefox, and Edge, as well as its capacity to compromise cryptocurrency wallets, makes it a potent threat, particularly to users holding digital assets.
The malware spreads through phishing campaigns, malicious downloads, and compromised websites, often hidden within pirated software or gaming mods. Lumma Stealer employs various evasion tactics, such as encrypting communications with its command-and-control server and using obfuscation techniques to avoid detection by antivirus programs. Its ability to bypass security measures and harvest valuable information makes it a dangerous tool for cybercriminals.
The CAPTCHA provides an extra layer of camouflage, as it helps malicious websites and downloads bypass automated scanners used by security solutions. CAPTCHA requires human intervention, thus fooling security systems into thinking the site is legitimate.
Pirated games are attractive to cybercriminals for several reasons. First, users looking for free or cracked software are more likely to take risks, bypassing warnings and even turning off antivirus protections to install the software. Secondly, pirated games often require “patches” or “keygens” that are commonly disguised as malware.
The use of CAPTCHA tricks users into believing that the download or website they are interacting with is more secure. Since CAPTCHAs are typically seen as security measures, many users don’t think twice about solving them. After solving the CAPTCHA, they unknowingly download infected files, leaving their systems exposed to attacks.
To avoid malware attacks, it’s crucial to steer clear of pirated content. Downloading cracked games or software greatly increases the risk of malware infection. Instead, always use legitimate platforms for downloading games and software, as these sources are verified and safer. Keeping your security software, such as antivirus and anti-malware tools, up to date is essential for detecting and preventing new threats. Additionally, if your antivirus tool flags an installation, don’t ignore it; there’s likely a valid reason behind the warning.
As cybercriminals evolve their tactics, staying informed about new malware strategies is vital. CAPTCHAs, originally designed to confirm human users, are now being exploited by attackers as a method to distribute malware, particularly in the realm of pirated gaming. Understanding these risks and taking preventive steps can significantly reduce the likelihood of falling victim to such attacks.
Touchscreen laptops have been around for years. You can get them in all sizes and shapes. Just not from Apple. For years, the Cupertino giant has treated the idea of a touchscreen MacBook the way I treat a meeting that could have been an email: with open contempt. However, Wednesday looks like the day the company could finally change its mind.
The latest Apple invite puts the “Pro and Tell” showcase in Los Angeles at 10 a.m. PT (1 p.m. ET) on October 28, 2026. Instead of a regular live-streamed keynote, it is an invitation-only, hands-on event for a handful of press and creators (similar to what the company did for the MacBook Neo earlier this year).
Two residents of Chicago have filed a lawsuit in the US over claims that robots run by Coco Robotics and Serve Robotics captured their facial and hand measurements without consent, bringing renewed attention to the food delivery robots. The cases raise a troubling question: If a robot delivers food to your door, can it also be gathering sensitive information about you?
According to a report by The Associated Press, the proposed class-action lawsuits were filed in Cook County on Oct. 9 and allege violations of Illinois’ Biometric Information Privacy Act. The complaints claim that the robots’ cameras and LiDAR sensors captured information on customers’ faces and hands as they approached the machines to pick up their orders. Both have denied the allegations.
Nearly a month after announcing the GPT-6.1 Sol model, OpenAI unveiled GPT-6.1 Terra today. The latest addition to the family focuses on computer use, visual reasoning, coding, and professional work, while costing 50% less through the API than GPT-5.6 Terra.
OpenAI says Terra can handle everything from filling out browser forms and working inside spreadsheets to interpreting technical drawings and editing videos. The company says it can also complete computer-based tasks more than three times faster than GPT-6 Astra and GPT-6.1 Sol.