Tricky CAPTCHA Caught Dropping Lumma Stealer Malware

Lumma Stealer is being distributed in a new campaign that lures victims with fake CAPTCHA verification pages; when users complete the verification the page triggers a PowerShell command that downloads an initial malware stager. Researchers note the stealer’s adaptability—previous 2024 delivery methods included weaponized YouTube content, hijacked Facebook pages, and scams targeting gamers—and advise continuous monitoring, updated detection rules, and coordinated threat intelligence and incident response to mitigate the threat.