Skip to content

Event

Hackers infect Ukrainian PCs through fake “I am not a robot” check

Hackers have replaced CAPTCHA on over 100 websites, leading to the infection of Ukrainian computers. The attackers use fake Cloudflare security check pages to steal data from Windows users.

In brief

  • Hackers replaced CAPTCHA on over 100 websites.
  • Attackers force users to run dangerous PowerShell commands.
  • The virus steals passwords and provides remote access to PCs.
  • The cyberattack targets users of the Windows operating system.
  • Hackers UAC-0277 compromised legitimate websites to spread malware.
Covered by 2 of 6 media groups
  • Budget not in the collected reports
  • Public money not in the collected reports
  • Media business 3 sources
  • Big capital not in the collected reports
  • Readers and grants not in the collected reports
  • Undisclosed 1 source

No newsrooms from these groups in the collected reports: budget, public money, big capital, readers and grants.

What are media groups?

Share of reports by media group
GroupShareCount
Media business
  • Newsroom 3
75%3 items
Undisclosed
  • Newsroom 1
25%1 item

How we count media groups — Methodology

Report an error

    • first item
    • earliest
    • national desk

    Фейкова перевірка "Я не робот" - хакери заражають ПК українців небезпечним вірусом

  • dev.uaMedia business
    • first item
    • in the wave, 15 min later
    • national desk

    Хакери викрадають дані через фейкову перевірку «Я не робот». У CERT-UA виявили масштабну кібератаку

  • InformatorMedia business
    • first item
    • in the wave, 28 min later
    • national desk

    Перевірка "Я не робот" - хакери винайшли нову схему для зламу сайтів

  • InternetUAUndisclosed
    • first item
    • in the wave, 40 min later
    • national desk

    Фейкова перевірка "Я не робот" - хакери заражають ПК українців небезпечним вірусом

Comments

Loading comments…

Allow visit statistics? PostHog keeps them (EU servers) under a random browser id — no name, no account; kept for 12 months. Vercel Speed Insights measures page speed, with no id. The site works the same without. Details