My Zero Trust Tunnel Applications Show A Malicious Captcha After Account Compromise

Zero Trust
1

Related to

Cloudflare Tunnel

What is the issue you’re encountering

All of my tunnel applications show the malicious captcha shown in screenshot.

What steps have you taken to resolve the issue?

I have changed password. Enabled 2FA. I noticed in the logs that an API key was made when someone logged in but do not see any api keys when I check on my profile. I have tried purging the cache of everything. New tunnels I create still have this issue. All my DNS settings seem correct.

What are the steps to reproduce the issue?

Going to any of my tunneled applications

Screenshot of the error

captcha.png
captcha.png557×493 19 KB

2

I got the same issue, tried refreshing my api tokens and the tunnels but nothing is helping atm.
If i connect to the server’s locally i dont get it its only when i use the cloudflared tunnel

3

Do you have a worker in your account? I was starting to think that was how the captcha was being served. Also I would change your global api.

4

I did change my global api, don’t know if i have a worker ill have alook but dont think so.