This repository is an archive of the Github-Captcha-Stealer project. It contains historical data for educational and archival purposes only. No support or updates will be provided.
Github-Captcha-Stealer was devised as a CAPTCHA Website intending to lead users to believe they were solving a CAPTCHA challenge. However, the website was actually stealthily deploying an infostealer virus to the user's computer without their knowledge.
The Lumma Stealer malware, after installation, is a service that allows cybercriminals to steal a large list of sensitive information from compromised systems such as:
-
Login credentials of web browsers, FTP clients, and email clients
-
Stored passwords on the browser and autofill data
-
Session tokens and cookies, account hijacking will be enabled
-
Private keys and crypto wallets
-
IP address, operating system details, and hardware info are part of the System information
-
Clipboard data, if you had copied passwords, addresses, and other sensitive info
-
Telegram sessions, they will allow you to get into conversations and accounts
Lumma Stealer is usually found on dark web marketplaces with the name "malware-as-a-service" which is a platform providing regular updates, support, and customization options for cybercriminals.
-
Fake CAPTCHA: A system that imitates real CAPTCHA algorithms in order to be accepted by users.
-
Stealthy Infostealer: Hides the installation and execution of malware behind the rules of a game.
-
Persistence: The infogetter was made to keep on the targeted machine no matter how many system reboots are performed.
This repository is exclusively for the purpose of education. The use of this code for any malicious activity is strictly prohibited. The authors and maintainers of this repository do not endorse or condone any illegal use of the software.
-
index.html- The main page with the fake CAPTCHA form. -
download.txt- A URL that was embedded in the script of the executed code. DO NOT RUN THE CODE WITHIN THE .TXT, IT IS AN UNTAMPERED COPY OF THE ORIGINAL CODE FROM THE WEBSITE
The original project contained malicious elements, which have been removed for safety. Under no circumstances should this repository or its code be used for unauthorized or illegal activities. The maintainers of this repository hold no responsibility for any misuse of the materials herein.
This repository is shared under the MIT License for educational and archival purposes.