Cybercriminals are exploiting phone screenshots and notes as a new source of sensitive information, cybersecurity firm Kaspersky has warned. Once installed, it scans entire photo galleries on devices to extract sensitive data from screenshots, such as passwords or cryptocurrency wallet recovery phrases. Attackers exploit trusted services such as Telegram pages and Google Translate links to bypass filters, while some phishing sites deploy CAPTCHA screens to avoid machine detection. Some phishing sites even deploy CAPTCHA screens upfront to evade machine detection, tactics that mirror those already seen in local incidents. XDR Optimum offers AI-backed endpoint protection, automated response, cloud sandboxing, patch and vulnerability management, and tools to monitor shadow IT.