Cyber Security News | A Fake CAPTCHA Leverage Pastejacking Script To Steal Clipboard Data скачать в хорошем качестве

Cyber Security News | A Fake CAPTCHA Leverage Pastejacking Script To Steal Clipboard Data

#cybersecurity #news #newattack ‪@tlinatutorials‬ 😊 KongTuke is a sophisticated cyberattack that targets users through compromised legitimate websites. The attack begins when a victim visits a website with an injected malicious script. This script redirects the user to a fake CAPTCHA page. This fake page tricks the user into clipboard hijacking or Pastejacking. It puts a harmful script into the victim's clipboard and victim is then tricked into pasting and running the script. The script connects to a remote server and downloads more additional payloads. Mitigation Strategies: • Update SIEM, EDR and other endpoint security software with IOCs. • Keep Anti-Virus/Endpoint security solutions up to date. • Conduct effective cybersecurity training for employees.