Evolving the ClickFix tactic
https://www.bleepingcomputer.com/news/security/malicious-ads-push-lumma-infostealer-via-fake-captcha-pages/
A large-scale malvertising campaign distributed the Lumma Stealer info-stealing malware through fake CAPTCHA verification pages that prompt users to run PowerShell commands to verify they are not a bot.
The campaign leveraged the Monetag ad network to propagate over one million ad impressions daily across three thousand websites.