Tricky CAPTCHA Caught Dropping Lumma Stealer Malware

The persistent infostealer’s latest campaign inserts fake CAPTCHA pages into legitimate applications, fooling users into executing the malicious payload, researchers find.