Unit 4

Project Description

This project is going to look into different recent news in the cybersecurity world (as of March-April 2026) and go over different types of scams and hacks.

Link to Captcha Scam Article

Captcha Hack

Here's a new captcha scam that tricks users into giving their info to hackers. Essentially, users get a pop-up on a website that asks them to verify they're a human. After that, it prompts them to type a command (the Windows Key + R, then Ctrl + V). When they type it, that's where your info gets taken off your computer. The command entered runs a program that allows hackers to access your data.

This specific cybersecurity attack would be an infostealer. This story doesn't specify who was affected, but it can affect anyone.

To protect yourself from this:

Act fast and cut off all connections to Wi-Fi (This will isolate the device)
Change all passwords on other devices not affected by this + log out of all active devices
On the infected device, basically nuke your computer and get rid of everything on your computer, then reinstall all the apps after the nuke.
Run a full scan or antivirus program on the formerly infected device

Example of what Chapchas are :

Example of what the new hack would look like

Evalution

Who published the content?: Brooke Steinberg

Where was it published?: New York Post

When was it published?: April 1, 2026, 10:47 a.m. ET

The truthfulness and integrity of the facts: Accurate, trusted news source tweets quotes, minimal grammar/spelling mistakes.

How is it written and presented?: The article is meant to inform.

Links and Citations: Links to Instagram and other links to helpful resources.

Link to Zero-Day Attack

TrueChaos attack (CVE-2026-3502)

In Southeast Asia, a company was under an attack. This attack was enabled through an employee at the company. This attack allowed the attacker to replace the correct arbitrary code in the normal update, and instead, they added their own code. The attacker also launched a DLL backdoor through the same employee. These specific attacks were aimed at governments and law enforcement.

This specific cybersecurity attack would be malware and a virus. This hack specifically went after a Southeast Asian company

To prevent this from happening:

The employees should've properly checked the arbitrary code for the update.
The employee who got hacked should've been more cautious

Evalution

Who published the content?: Ravie Lakshmanan

Where was it published?: The Hacker News

When was it published?: Mar 31, 2026

The truthfulness and integrity of the facts: Accurate, tweets quotes, minimal grammar/spelling mistakes.

How is it written and presented?: Some ads and the article is meant to inform.

Links and Citations: Links to CVE Record Information and other helpful resources.

Here is my General Cybersecurity Training

I learned about different types of viruses/hacks like phishing, ransomware, and pharming. Phishing is when hackers pretend to be someone trusted to get your info. Ransomware is when a hacker takes your info and wants money in return for it. (They won't always give you your things back if you give them the money). Pharming is when hackers make you think you're clicking on legit websites when they're actually fake ones. They are harder to detect.

Lesson Learned

I learned a lot about current news on cyberattacks while searching for articles that interested me the most. I also didn't think about hackers using captchas to hack people. Although it seems like something I wouldn't fall for because I've never had a website ask me to type in commands for their CAPTCHA, I can understand non-tech-savvy people falling for it. I also can get it if someone just isn't paying that much attention, but then again, that's a lot to type and not realize something is off.

Page updated

Google Sites

Report abuse