While plenty of CAPTCHA and reCAPTCHA verification prompts are legitimate, anything that includes instructions—pressing a combination of keys or executing a Run command on your device—certainly is not. Trustworthy CAPTCHAs won't direct you to download software or extensions.

Be wary of CAPTCHA forms from sources and sites you don't know and trust, and never follow directions in these pop-ups without thinking. Attackers are exploiting "verification fatigue," which has users clicking through something as routine as CAPTCHA so quickly that they don't notice red flags. [more]

https://lifehacker.com/tech/captcha-malware-warning

Its sad all ppl wanna do is hurt others!!

Thanks for that article. It also gave a very good advice on enhancing security: "Disable JavaScript in your browser when browsing web pages you don't know or trust." :)

Yes I always have scripts disabled... Thankfully I dont need them for 99.9% of things I do online......

Thanks for the info.