TTPwire Vol. 1 · MITRE ATT&CK·Tagged

← All stories

Malwarebytes Labs

Fake CAPTCHA scam turns a quick click into a costly phone bill

2026-04-28 · Read original ↗

ATT&CK techniques detected

2 predictions
T1566.002Spearphishing Link
76%
"fake captcha scam turns a quick click into a costly phone bill researchers have documented a long ‑ running campaign that uses fake captcha pages to trick mobile users into sending dozens of international sms messages in the background. if you ’ ve spent any time on today ’ s web…"
T1566.002Spearphishing Link
70%
"works a typical flow for the scam looks like this : victims arrive via malvertising or tds redirects, often from typosquatted telecom domains, onto a page that looks like a basic image ‑ selection or quiz captcha. to “ continue, ” they ’ re prompted to tap a button that opens the…"

Summary

Scammers are using fake CAPTCHA pages to rack up international SMS charges on victims’ phone bills, and then take a cut.