Widespread Fake CAPTCHA Campaign Delivering Malware

Arctic Wolf observed a campaign that compromises legitimate websites to present fake CAPTCHA challenges that instruct users to execute PowerShell commands, ultimately delivering information-stealer malware (examples include HEP2go and several auto dealership sites). The advisory warns users to avoid sites showing such challenges, notes detections for malicious PowerShell substrings, and recommends deploying Arctic Wolf Agent/Sysmon and security awareness training.