Sandworm hackers have a CAPTCHA trick for Ukrainians

Russian military intelligence hackers from Sandworm are using fake CAPTCHA prompts on compromised websites to trick Ukrainian targets into copying and pasting PowerShell commands that download malware. CERT-UA observed the ClickFix technique on over 10 compromised websites during June and July. The initial malware, GhettoVibe, can be followed by the ScoutCurl reconnaissance tool.