Police stressed that genuine websites never ask users to execute system commands or install software during CAPTCHA verification. In an advisory issued on Tuesday, police said cybercriminals are luring users to malicious websites that display what appears to be a legitimate CAPTCHA verification. After completing the fake verification, users are prompted to execute commands or download files that compromise their devices. Police stressed that genuine websites never ask users to execute system commands or install software during CAPTCHA verification. "No legitimate website asks users to open or execute PowerShell or Command Prompt commands, download files or install software as part of CAPTCHA verification."