The Scam Where You Run the Malware Yourself: ClickFix and the Fake CAPTCHA Trick
A fake CAPTCHA says press Windows-R, paste the verification code, hit Enter. The code is a PowerShell download cradle, and it runs with your full user authority, past every browser sandbox. Why this trick works, the variant families, and the one rule users can memorise that kills the whole class.