Security researchers have identified a dangerous campaign spreading Lumma Stealer malware disguised within fake CAPTCHA pages. The scheme, known as “DeceptionAds”, is targeting millions of users by using fake ads and cloaking services to deceive victims into downloading the malicious software. The attackers manipulate legitimate platforms like Monetag ad network and BeMob to distribute the malware, which ultimately aims to steal sensitive information such as cryptocurrency wallets, email credentials, and financial data. Following the discovery by Guardio Labs, efforts have been made to address the issue, with Monetag removing accounts and BeMob terminating the campaign. This incident serves as a reminder of the ongoing threats posed by sophisticated cybercriminals in the digital landscape.