# Beware the New Phishing Tactic: Fake CAPTCHA and PowerShell Stealer Unveiled! ⚠️

**URL:** <https://onehack.st/t/beware-the-new-phishing-tactic-fake-captcha-and-powershell-stealer-unveiled/291942>\
**Category:** News & Articles\
**Tags:** hacking, windows\
**Created:** [September 23, 2024, 1:06pm UTC](https://onehack.st/t/beware-the-new-phishing-tactic-fake-captcha-and-powershell-stealer-unveiled/291942 "2024-09-23T13:06:18Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![TheJoker](https://onehack.st/user_avatar/onehack.st/thejoker/32/22660_2.png) [@TheJoker](https://onehack.st/u/TheJoker)\
**Post date:** [September 23, 2024, 1:06pm UTC](https://onehack.st/t/beware-the-new-phishing-tactic-fake-captcha-and-powershell-stealer-unveiled/291942/1 "2024-09-23T13:06:19Z")

</div>

**Summary:**

* * *

1. **Novel Phishing Method**  
GitHub users received phishing emails claiming to report security vulnerabilities, leading them to a malicious site.

2. **Deceptive CAPTCHA**  
The email prompts users to pass a fake CAPTCHA that instructs them to run harmful PowerShell commands, ultimately downloading malware.

3. **Credential Stealer**  
The malicious software, known as Lumma Stealer, targets and captures stored credentials from the victim’s PC.

**Read more at:** [Krebs on Security](https://krebsonsecurity.com)