logo

Vietnam’s Massive CAPTCHA crackers vs. Microsoft DCU

ID: b16b7484-17f2-521c-b185-38f75dc1f4ab

STIX ID: report--b16b7484-17f2-521c-b185-38f75dc1f4ab

Feed Name: Security Boulevard

Threat Score
70/100

Date Published: 2023-12-31

Date Updated: 2026-04-22

Author: Gary Warner

...
...

Microsoft’s Digital Crimes Unit investigated a Vietnam-based group dubbed Storm-1152 that used CAPTCHA-cracking platforms and open-source/account-generation tooling to create an estimated 750 million fraudulent email accounts across services (Hotmail/Outlook and others). The report names domains and operators, cites GitHub projects and tooling used to bypass Arkose/HCaptcha/FunCaptcha protections, notes Microsoft’s seizure of several infrastructure elements, and warns that alternative services (e.g., AntiCaptcha) continue to offer high-volume CAPTCHA solving that sustains account-fraud activity.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.