Cybersecurity experts warn scammers are using fake CAPTCHA prompts to trick people into installing malware on their devices.