Phishing emails target a bank s users with malware and make their landing page look more legitimate with fake Google reCAPTCHAs. A recently-discovered phishing scam was found peddling malware, using a new technique to mask its malicious landing page. The campaign targeted a Polish bank and its users with emails, said researchers with Sucuri. These emails contained a link to a malicious PHP file, which eventually downloaded the BankBot malware onto victims systems. BankBot is a remotely controlled Android banking trojan capable of stealing banking details.
Source: https://threatpost.com/phishing-scam-malware-google-recaptcha/142142/