Windows 10 and Windows 11 users on red alert over copy and paste bug

Windows 10 and Windows 11 users are being warned of a new and concerning threat that should definitely not be ignored. The security experts at McAfee have sounded an alarm about a fresh kind of attack that cunningly uses the familiar CAPTCHA verification pop-ups to sneak malware onto devices.

Users accustomed to seeing CAPTCHA challenges to validate their humanity might find themselves in trouble. These familiar "Are you human" checks now become a tool for cybercriminals looking to deploy data-stealing malware.

McAfee Labs has unearthed that this deceit begins with a counterfeit CAPTCHA interface popping up during web surfing. This seemingly innocuous window actually harbors a hidden danger nasty shock, reports the Express .

• Playstation announces limited-edition PS one-style PS5 Pro for 30th anniversary
• GTA 6 could be pushed to 2026, as gaming reporter cites information from 'multiple devs'

When the pop-up emerges, it displays the common "I'm not a robot" option, which, when selected, activates a malicious chain of events. Tapping that button inadvertently copies a dangerous PowerShell script to the user's clipboard, which they're then deceitfully instructed to run by pasting it as per guided steps on the screen.

Not just through sham websites does this scheme unfold, but also via emails from the attackers that lead to the same dubious installation routine.

"By leveraging fake CAPTCHA pages, attackers deceive users into executing malicious scripts that bypass detection, ultimately leading to malware installation," McAfee explained.

"The use of multi-layered encryption further complicates detection and analysis, making these attacks more sophisticated and harder to prevent."

If you're concerned about this new type of cyber threat, steer clear of unofficial websites or web pages offering free streams or discounted game downloads.

Make sure to double-check URLs in emails, particularly those from unknown or unexpected senders, and limit clipboard-based scripts while disabling automatic script execution.

And don't forget, keeping your antivirus software up-to-date and on the lookout for dangers is always a smart move.