A fake CAPTCHA scam is tricking Windows users into running PowerShell commands that install StealC malware and steal passwords, crypto wallets, and more.
Users could be tricked into running arbitrary code, but the issue was patched last week.