
- Infoblox researchers expose long‑running CAPTCHA scam that tricks victims into sending costly international SMS messages
- Victims can unknowingly send dozens of texts, incurring charges while attackers profit through telecom revenue sharing
- The defense is simple: never send a text message to “prove you are human”
Fake CAPTCHAs are not just about copying and pasting links to malware - they can also be about sending an SMS to an international number and being charged a whole lot for the privilege.