Fake CAPTCHA Scam Abuses Verification Clicks to Send Costly International Texts

Collection of April 2026 security reports covering multiple active threats and incidents: a large Click2SMS fraud campaign abusing fake CAPTCHAs and back-button hijacking to trick victims into sending costly international texts; a ClickFix variant that leverages native Windows tools (cmdkey, regsvr32) to run commands and persist while evading detection; TeamPCP supply-chain compromise using the Bitwarden CLI and GitHub Dependabot to distribute the Shai-Hulud malware and poison developer tooling; Harvester APT deploying new GoGra Linux malware (fake PDFs, Microsoft APIs) to target South Asia; a