[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fef4zq0rUZRhSeIc1SrsB9_peBadvXP2xtcyz3-VCK4U":3},{"lesson":4},{"id":5,"slug":6,"article_id":7,"title":8,"body":9,"prevention":10,"framework_refs":11,"status":17,"created_at":18,"published_at":19,"article":20,"tags":24,"podcasts":37},"d6cccacd-9648-42ea-802e-4c914e2aa7ba","fake-captcha-scam-exploits-user-trust-for-international-sms-fraud","1a79c3fd-6d65-44c0-9152-4f23bac1a65f","Fake CAPTCHA Scam Exploits User Trust for International SMS Fraud","Cybercriminals are using sophisticated social engineering tactics, including fake CAPTCHA verification pages, to trick users into unknowingly sending premium international SMS messages that generate revenue through telecommunications fraud. The campaign has operated undetected since 2020 by employing delayed billing, back-button hijacking, and legitimate-looking verification processes to bypass user suspicion. This demonstrates how attackers exploit user trust in common web security elements and highlights the need for comprehensive fraud detection systems that can identify unusual telecommunications activity patterns.","**User education:**\n- Train users to recognize suspicious CAPTCHA requests, especially those requiring SMS verification\n- Implement regular security awareness training focused on social engineering tactics\n- Educate users about premium SMS services and how to identify unauthorized charges\n\n**Technical controls:**\n- Deploy web filtering solutions to block known malicious traffic distribution systems\n- Implement network monitoring to detect unusual outbound SMS traffic patterns\n- Configure mobile device management policies to restrict premium SMS services\n\n**Detection measures:**\n- Monitor telecommunications bills for unexpected international SMS charges\n- Implement behavioral analytics to identify users visiting suspicious domains\n- Establish incident response procedures for reporting suspected telecommunications fraud",[12,13,14,15,16],"CIS Control 14 (Security Awareness Training)","CIS Control 13 (Network Monitoring)","NIST SP 800-53 AT-2 (Awareness Training)","NIST SP 800-53 SI-4 (System Monitoring)","ISO 27001 A.7.2.2 (Information Security Awareness)","published","2026-04-27T11:09:30.997674+00:00","2026-04-27T11:09:30.598+00:00",{"id":7,"url":21,"slug":22,"title":23},"https:\u002F\u002Fthehackernews.com\u002F2026\u002F04\u002Ffake-captcha-irsf-scam-and-120-keitaro.html","fake-captcha-irsf-scam-and-120-keitaro-campaigns-drive-global-sms-crypto-fraud-ab6cca","Fake CAPTCHA IRSF Scam and 120 Keitaro Campaigns Drive Global SMS, Crypto Fraud",[25,31],{"id":26,"name":27,"slug":28,"description":29,"color":30},"1732a005-556e-411c-a9db-5edec3058571","Logging & Monitoring","logging-monitoring","Missing logs, no alerting, blind spots","#a855f7",{"id":32,"name":33,"slug":34,"description":35,"color":36},"7261eb8f-acd4-4d93-a489-7fdd652ec0ea","Security Awareness","security-awareness","Phishing, social engineering, human error","#22c55e",[]]