Cybercriminals are increasingly using fake „I’m not a robot“ CAPTCHAs for multi-stage malware infection chains, relying on users‘ increasing willingness to click.