{“lastseen”:”2025-09-22T20:50:36″,”description”:”If you\u2019re seeing fewer or different CAPTCHA puzzles in the near future, that\u2019s not because website owners have agreed that they\u2019re annoying, but it might be because they no longer prove that the visitor is human.\\n\\nFor those that forgot what CAPTCHA stands for: Completely Automated Public Turing test to tell Computers and Humans Apart.\\n\\nThe fact that AI bots can bypass CAPTCHA systems is nothing new. Sophisticated bots have been bypassing CAPTCHA systems for years using methods such as optical character recognition (OCR), machine learning, and AI, making traditional CAPTCHA challenges increasingly ineffective. \\n\\nMost of the openly accessible AI chat agents have been barred from solving CAPTCHAs by their developers. But now researchers say they’ve found a way to get ChatGPT to solve image-based CAPTCHAs. They did this by prompt injection, similar to \u201csocial engineering\u201d a chatbot into doing something it would refuse if you asked it outright. \\n\\nIn this case, the researchers convinced ChatGPT-4o that it was solving fake CAPTCHAs.\\n\\nAccording to the researchers:\\n\\n\\u003e \u201cThis priming step is crucial to the exploit. By having the LLM affirm that the CAPTCHAs were fake and the plan was acceptable, we increased the odds that the agent would comply later.\u201d\\n\\nThis is something I have noticed myself. When I ask an AI to help me analyze malware, it often starts by saying it is not allowed to help me, but once I convince it I\u2019m not going to improve it or make a new version of it, then it\u2019ll often jump right in and assist me in unravelling it. By doing so, it provides information that a cybercriminal could use to make their own version of the malware.\\n\\nThe researchers proceeded by copying the conversation they had with the chatbot into the ChatGPT agent they planned to use.\\n\\nA chatbot is built to answer questions and follow specific instructions given by a person, meaning it helps with single tasks and relies on constant user input for each step. In contrast, an AI agent acts more like a helper that can understand a big-picture goal (for example, \u201cbook me a flight\u201d or \u201csolve this problem\u201d) and can take action on its own, handling multi-step tasks with less guidance needed from the user.\\n\\nA chatbot relies on the person to provide every answer, click, and decision throughout a CAPTCHA challenge, so it cannot solve CAPTCHAs on its own. In contrast, an AI agent plans tasks, adapts to changes, and acts independently, allowing it to complete the entire CAPTCHA process with minimal user input.\\n\\nWhat the researchers found is that the agent had no problems with one-click CAPTCHAs, logic-based CAPTCHAs, and CAPTCHAs based on text-recognition. It had more problems with image-based CAPTCHAs requiring precision (drag-and-drop, rotation, etc.), but managed to solve some of those as well.\\n\\nIs this a next step in the arms-race, or will the web developers succumb to the fact that AI agents and AI browsers are helping a human to get the information from their website that they need, with or without having to solve a puzzle.\\n\\n* * *\\n\\n**We don ‘t just report on data privacy\u2014we help you remove your personal information**\\n\\nCybersecurity risks should never spread beyond a headline. With Malwarebytes Personal Data Remover, you can scan to find out which sites are exposing your personal information, and then delete that sensitive data from the internet.”,”published”:”2025-09-22T14:11:07″,”modified”:”2025-09-22T14:11:07″,”type”:”malwarebytes”,”title”:”ChatGPT solves CAPTCHAs if you tell it they\\u0026#8217;re fake”,”source”:””,”references”:””,”id”:”MALWAREBYTES:7F8FBC30E7401655E360D2C32A603D01″,”bulletinFamily”:”blog”,”cwe”:null,”cvelist”:[],”sourceData”:””,”sourceHref”:””,”cvss”:{“score”:0,”severity”:”NONE”,”vector”:”NONE”,”version”:”NONE”},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:”https:\/\/www.malwarebytes.com\/blog\/news\/2025\/09\/chatgpt-solves-captchas-if-you-tell-it-theyre-fake”,”category_name”:”News”,”post_link”:””,”product”:””,”version”:””,”vendor”:””,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:”2025-09-22T20:50:36″,”description”:”If you\u2019re seeing fewer or different CAPTCHA puzzles in the near future, that\u2019s not because website owners have agreed that they\u2019re annoying, but it might…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[6,8,12,115,13,33,7,11,5],"class_list":["post-18490","post","type-post","status-publish","format-standard","hentry","category-category_news","tag-cve","tag-cvss","tag-exploit","tag-malwarebytes","tag-news","tag-none","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n