Case 01
A fake CAPTCHAthat leads to the internal network.
- What happenedAn employee searches for a tool and lands on a page that asks them to “verify you are human”. The check asks them to press a few keys: in reality, to paste and run a command.
- How it unfoldsThe command installs malware on the laptop. From there, attackers move through the internal network, looking for servers, shares and admin accounts.
- What Fency doesFency recognises the fake verification page and stops the user before anything is run. It explains that no website ever needs you to run a command, and flags the event to IT.
- What you avoidMalware on the network, and the days of investigation and recovery that follow.