A fake CAPTCHA scam tricks users into installing malware via simple keyboard commands. Here's how to stay safe.