New threat uses fake CAPTCHA to infect systems with malware