This cybercrime group claims it can help hackers beat CAPTCHA locks
CAPTCHA-beating tool on sale for just $70
Cybersecurity experts have reported discovering an threat actor selling CAPTCHA-solving services to its customers.
Arkose Cyber Threat Intelligence Research (ACTIR) says the Greasy Opal group is allegedly based in the Czech Republic and has, in the past decade and a half, sold all kinds of software, both legitimate and illegal. However, it drew the attention of the researchers with the CAPTCHA-solving tool.
CAPTCHA stands for Completely Automated Public Turing test to tell Computers and Humans Apart. It's a type of challenge-response test used to determine whether the user is human or a bot. CAPTCHAs are designed to prevent automated software (bots) from doing things like creating accounts, sending email, accessing secure websites, and similar. If you opened at least one website in the last half a decade, you probably saw a CAPTCHA. It is usually a grid of up to nine images, in which the user is asked to select a few similar ones. There are different variants, though.
"Notably fast"
According to ACTIR, Greasy Opal’s tool is a “notably easy, fast, and flexible tool for the automatic recognition of a wide array of CAPTCHAs.”
“Greasy Opal positions its service as enhancing recognition velocity significantly (up to 10 times faster) and is therefore a replacement for competitive CAPTCHA-solving solutions,” such as AntiGate, RuCaptcha, or DeCaptcher, the researchers said.
The tools Greasy Opal offers are apparently bundled, and cost $70 to acquire. Furthermore, there is an additional $10 monthly subscription. Finally, those with deeper pockets can shell out an additional $100 to upgrade to the beta version and get the latest bells and whistles.
A bundle that includes all of Greasy Opal’s tools costs $190, with the additional $10 subscription fee. The researchers believe Greasy Opal raked in at least $1.7 million last year.
Are you a pro? Subscribe to our newsletter
Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!
More from TechRadar Pro
- Businesses urgently need to rethink CAPTCHAs
- Here's a list of the best firewall software around today
- These are the best endpoint security tools right now
Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.