Microsoft Threat Intelligence has discovered TerminalFix, a campaign that uses fake CAPTCHAs to trick users into running PowerShell scripts.