Sandworm hackers have a CAPTCHA trick for Ukrainians

Russian military intelligence hackers Sandworm use fake CAPTCHA prompts on compromised websites to trick Ukrainian targets into copying and pasting PowerShell commands. The initial malware, GhettoVibe, is followed by ScoutCurl reconnaissance tool. CERT-UA observed the ClickFix technique on over 10 compromised websites during June and July.