Using fake CAPTCHA images, ClickFix spreads all manner of threats, including infostealers, ransomware, remote access trojans, cryptominers, and even malware from nation-state-aligned threat actors. It hides the malicious activity from us, and our security software, and uses legitimate Windows tools to stay under the radar. There are various ways you may be exposed to a malicious CAPTCHA. A CAPTCHA threat could also install a remote access trojan (RAT), another type of malware but this time designed to provide remote access to your machine. Falling for a CAPTCHA threat isn’t the end of the world.