Fake CAPTCHA pages can install the StealC infostealer. Don't paste or run commands; disconnect and change passwords.