Windows PCs targeted by hackers in a fake CAPTCHA scam to spread malware — Outlook account credentials are at risk

Hacker doing computer sabotage using encryption trojan ransomware in hidden base.

Bad actors and hackers have identified a loophole that allows them use fake CAPTCHA pages to trick Windows users into launching "Stealthy StealC Information Stealer" malware.

According to security sleuths at LevelBlue, “StealC exfiltrates browser credentials, cryptocurrency wallets, Steam accounts, Outlook credentials, system information, and screenshots to a command-and-control (C2) server using RC4-encrypted HTTP traffic.”