This cybercrime group claims it can help hackers beat CAPTCHA locks

captcha solver text
(Image credit: Future)

Cybersecurity experts have reported discovering an threat actor selling CAPTCHA-solving services to its customers.

Arkose Cyber Threat Intelligence Research (ACTIR) says the Greasy Opal group is allegedly based in the Czech Republic and has, in the past decade and a half, sold all kinds of software, both legitimate and illegal. However, it drew the attention of the researchers with the CAPTCHA-solving tool.

CAPTCHA stands for Completely Automated Public Turing test to tell Computers and Humans Apart. It's a type of challenge-response test used to determine whether the user is human or a bot. CAPTCHAs are designed to prevent automated software (bots) from doing things like creating accounts, sending email, accessing secure websites, and similar. If you opened at least one website in the last half a decade, you probably saw a CAPTCHA. It is usually a grid of up to nine images, in which the user is asked to select a few similar ones. There are different variants, though.

"Notably fast"

According to ACTIR, Greasy Opal’s tool is a “notably easy, fast, and flexible tool for the automatic recognition of a wide array of CAPTCHAs.”

“Greasy Opal positions its service as enhancing recognition velocity significantly (up to 10 times faster) and is therefore a replacement for competitive CAPTCHA-solving solutions,” such as AntiGate, RuCaptcha, or DeCaptcher, the researchers said.

The tools Greasy Opal offers are apparently bundled, and cost $70 to acquire. Furthermore, there is an additional $10 monthly subscription. Finally, those with deeper pockets can shell out an additional $100 to upgrade to the beta version and get the latest bells and whistles.

A bundle that includes all of Greasy Opal’s tools costs $190, with the additional $10 subscription fee. The researchers believe Greasy Opal raked in at least $1.7 million last year.

Via Infosecurity Magazine

More from TechRadar Pro

Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.

Read more
Robotic hand clicking on captcha 'I am not a robot'.
"A tracking cookie farm for profit" - report claims reCAPTCHA has caused 819 million hours of wasted human time, and billions in Google profits
Robotic hand clicking on captcha 'I am not a robot'.
Fake CAPTCHAs are being used to spread malware - and we only have ourselves to blame
Someone checking their credit card details online.
Hackers use CAPTCHA scam in PDF files on Webflow CDN to get past security systems
Dark Web cybercriminals are buying up ID to bypass KYC methods
A hacker typing on a MacBook laptop with code on the screen.
This devious phishing site repurposes legitimate web elements like CAPTCHA pages for malware distribution
Robotic hand clicking on captcha 'I am not a robot'.
Double clicking danger - experts warn just two clicks can let attackers steal your accounts
Latest in Security
Hacker silhouette working on a laptop with North Korean flag on the background
North Korea unveils new military unit targeting AI attacks
An image of network security icons for a network encircling a digital blue earth.
US government warns agencies to make sure their backups are safe from NAKIVO security issue
Laptop computer displaying logo of WordPress, a free and open-source content management system (CMS)
This top WordPress plugin could be hiding a worrying security flaw, so be on your guard
Computer Hacked, System Error, Virus, Cyber attack, Malware Concept. Danger Symbol
Veeam urges users to patch security issues which could allow backup hacks
UK Prime Minister Sir Kier Starmer
The UK releases timeline for migration to post-quantum cryptography
Representational image depecting cybersecurity protection
Cisco smart licensing system sees critical security flaws exploited
Latest in News
Quordle on a smartphone held in a hand
Quordle hints and answers for Sunday, March 23 (game #1154)
NYT Strands homescreen on a mobile phone screen, on a light blue background
NYT Strands hints and answers for Sunday, March 23 (game #385)
NYT Connections homescreen on a phone, on a purple background
NYT Connections hints and answers for Sunday, March 23 (game #651)
Google Pixel 9 Pro Fold main display opened
Apple is rumored to be prioritizing battery life on the foldable iPhone – which could also feature a liquid metal hinge for added durability
Google Pixel 9
The Google Pixel 10 just showed up in Android code – and may come with a useful speed boost
L-mount alliance
Sirui joins L-Mount Alliance to deliver its superb budget lenses for Leica, DJI, Sigma and Panasonic cameras