A routine online security check is being weaponised by cyber criminals, according to a new warning from the US Federal Trade Commission (FTC). The agency says scammers are creating fake CAPTCHA pages that look like legitimate verification tests but are designed to trick users into installing malware on their own devices.
Once installed, the malicious software can steal banking credentials, email login details, and other sensitive information. The warning highlights a growing phishing tactic that exploits a security tool millions of people encounter every day while browsing the internet.