Fake CAPTCHA tests trick users into running malware

Microsoft details the ClickFix social-engineering technique that fools users into pasting and executing attacker-supplied commands (often via a fake CAPTCHA) to install malware; campaigns have delivered high-impact payloads such as Lumma Stealer, Lampion, various RATs, loaders, and rootkits against enterprise and government targets, with observed global scale and included indicators of compromise and mitigation recommendations.