Fake CAPTCHA Attacks Exploit Key Entry Point for LummaStealer Malware

This report describes a renewed, large-scale LummaStealer campaign that leverages fake CAPTCHA 'ClickFix' social-engineering lures and CastleLoader memory-execution loaders to deliver an information-stealing payload that harvests browser credentials, cookies, 2FA tokens, crypto wallets, and other sensitive files; telemetry shows widespread activity after a prior takedown and provides detection signals (randomized DNS lookup patterns) and mitigation guidance.