

Yes, they’re glossing over the fact that the user must manually paste and execute code that the fake captcha puts on the clipboard.
Not a new attack vector in the slightest, just a play on the entry method.
Anyone doing this should have their computer taken away and head inspected/retrained.
Age regardless. Get them taught or take it for from them for their own good.