Dangerous captchas will get you hacked, tracked and sacked!

Do you verify you are human? BEWARE

... you've been trained to click!

We're seeing these captchas at almost every web site these days . Why? Google has trained you to click as a security effort, or to allow you to enter a web site you wanted to go to. You trusted Google. And for a while, these devices were authentic and served an important purpose. But all that has changed.

When you see something like this, ask yourself:: why do they need to know?

many captchas you encounter have become malicious captchas

Why do they need to know? Why does it matter?

Good question. Most sites don't care if you're human, and they don't need to block your entry before you can go in. What they want to know is your "UID", where you came from, where you wanted to go, and if you can slide the slider. You realize, of course, that AI is perfectly capable of modifying the encoding to show they moved the slider, right? It's all a ruse.

code_1

Right Click, and find "View Source" ... some browsers may be different, and you are not allowed to peek at the code on an iPhone. When you view the source, scroll down and see if the "destination" tag matches the web site you intended to go to. BOOM. If it does not, then you don't want to click. Also note, while they're targeting American email addresses, they just may not be American crooks!

Arabic hacker spammers created this captcha to trap you

Okay, so here you go. To show you how easy it is to set up
Go ahead :: PROVE YOU ARE HUMAN
All the scammers have to do is put their redirect page into their Google Cloud web page (Google doesn't care) and insert their malware web page! Boom!

Yes, it is truly incredible. Each day, the list gets longer, not shorter. It still takes a human to see whether or not it's a criminal act. IF YOU KEEP letting the get away with it, they will. Eventually you won't know a safe captcha from a malicious one. Will you click? Do you feel lucky?

BOTTOM LINE : DO NOT CLICK

Thank you for reading!

SafeNetting . . . . SafeNetting Content on Medium

NOTE : if you are from LAW ENFORCEMENT and wish to check further, the actual spam, and research dossier is available upon request.

Captcha_link_anatomy

REFERENCE LINKS

CAN-SPAM Act: A Compliance Guide for Business Advertising and Marketing Online
CAN-SPAM Act: A Full legal text (U.S. law) The CAN-SPAM Act is codified in 15 U.S. Code Chapter 103 (15 U.S.C. §§ 7701–7713). You can read the statute in full on: govinfo (official U.S. government legal database): CAN-SPAM Act on govinfo
Cornell Legal Information Institute (clean, readable version):15 U.S. Code Chapter 103 - Controlling The Assault of Non-Solicited Pornography And Marketing
FTC Act Section 5 that apply to a phishing email, the governing law is: Federal Trade Commission Act — 15 U.S.C. § 45 (Section 5)
Computer Fraud and Abuse Act (CFAA) Cornell Legal Information Institute (clean readable version) often used in phishing cases because it covers: * credential theft schemes * fake login pages * unauthorized access obtained via deception
Title 18 of the U.S. Federal Code the full U.S. Government Publishing Office official U.S. code

FAIR USE NOTICE: This web site may make use of copyrighted material. Such material are made available for commentary and educational purposes only. This constitutes a "Fair Use" of any such copyrighted material as provided for in TITLE 17 U.S.C. SECTION 106A-117 of the United States Copyright Law.
Safe Netting, Safenetting.com, all rights reserved, ©2000 through present. Established on the internet in 2000, as part of the User Group Network. Safenetting was launched by brothers Joe Showker and Fred Showker as a community service to help educate the public on the dangers of the internet and connected world ** InfoManager is a trademarks for the User Group Network, ©1994