MalwareJun 5, 2026
🚨 A threat actor known as welcometonightbrother is sharing source code that allegedly bypasses C...
Threat actor welcometonightbrother releases alleged Cloudflare Turnstile CAPTCHA bypass tool.
Vendor Watch
Run Cloudflare?
Get an email when a reviewed story names Cloudflare, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
Summary
A threat actor using the handle welcometonightbrother has publicly shared source code claiming to bypass Cloudflare's Turnstile bot-detection and CAPTCHA system. The tool reportedly operates in a browser-based context, potentially enabling automated attacks against protected websites. This disclosure represents an active threat to web security infrastructure relying on Turnstile for bot mitigation.
Indicators of Compromise
- url — https://t.co/xnsKTtftJf
Entities
welcometonightbrother (threat_actor)Cloudflare Turnstile (product)Cloudflare (vendor)