Security2 hOctober 15, 2026, 20:29

Barracuda: fake CAPTCHAs used in 43% of 2025 phishing kit attacks

Barracuda found CAPTCHA abuse in 43% of the phishing kits it examined in 2025. Fake "prove you're human" checks lead to counterfeit Microsoft 365 login pages, malware downloads, or ClickFix commands that victims run themselves.

Help Net Security

Open source

Barracuda: fake CAPTCHAs used in 43% of 2025 phishing kit attacks

CAPTCHA abuse appeared in 43% of phishing kits Barracuda examined in 2025
Checks mask Microsoft 365 credential theft and malware downloads
In ClickFix attacks a command is copied to the clipboard and run via the Windows Run dialog
AI and no-code tools help attackers build fake CAPTCHAs and multi-step login chains

#Barracuda#Microsoft

Group-IB exposes Milk Dragon phishing kit using fake social media discounts

Security

Calendar phishing is growing exponentially as fake meetings steal logins

Security

Barracuda: Phishing Emails Hide AI Prompt Injections for Assistants

Security

Barracuda: fake CAPTCHAs used in 43% of 2025 phishing kit attacks

Group-IB exposes Milk Dragon phishing kit using fake social media discounts

Calendar phishing is growing exponentially as fake meetings steal logins

Barracuda: Phishing Emails Hide AI Prompt Injections for Assistants

Microsoft disrupts three phishing platforms used by Chinese cybercriminals