Top News

Be alert before clicking on Captcha, your passwords could be stolen, cyber attacks are happening with the help of AI..

Shikha Saxena | September 23, 2025 5:15 PM CST

Cybercriminals are exploring new ways of deceiving. Phishing attacks are now being conducted with the help of AI, deceiving users by creating fake CAPTCHA pages. These pages appear genuine and evade security software. According to a Trend Micro report, such pages have been created on platforms like Vercel, Netlify, and Lovable since January, and the number of attacks increased in August. These platforms offer easy coding and free hosting, which criminals are taking advantage of.

Phishing Sites Created with the Help of AI Tools
A CSO report states that platforms like Lovable, Netlify, and Vercel make website creation easy. Criminals use them to create fake CAPTCHA pages without much technical knowledge. Fake pages are created using 'vibe coding' on Lovable, while phishing sites are created quickly using AI tools on Vercel and Netlify.

Phishing attacks follow this pattern
These phishing attacks operate according to a specific pattern. Users receive spam emails containing important messages, such as password resets or address changes. Clicking on the links in these emails takes the user to a fake CAPTCHA page that resembles a genuine security check. The user believes they are completing a normal process, thus reducing their suspicion. After completing the CAPTCHA, the user is redirected to the actual phishing page, where their password or other sensitive information is stolen.

Deceiving Security Tools
The unique feature of fake CAPTCHA pages is that they deceive automated security scanners. Scanners only see the CAPTCHA page, not the actual phishing form. This makes the site undetectable. Trend Micro has detected 52 such fake sites on Vercel.app, 43 on Lovable.app, and 3 on Netlify.app. Lovable is the most frequently targeted, but many fake CAPTCHA pages also exist on Vercel.

Disclaimer: This content has been sourced and edited from Navbharat Times. While we have made modifications for clarity and presentation, the original content belongs to its respective authors and website. We do not claim ownership of the content.