Fake CAPTCHA Attacks Deploy Infostealers and RATs in a Multistage Payload Chain

A recent wave of phishing campaigns is exploiting fake CAPTCHA pages to trick users into executing malicious commands via the Windows Run dialog. These attacks deliver multistage payloads using obfuscated JavaScript embedded in MP3 or PDF files.