New variant of an old scam: Use the framing of a CAPTCHA to get an unsuspecting user to download and run a malicious program.