The attack begins on compromised websites displaying a convincing fake Cloudflare Turnstile CAPTCHA. The page shows a “Verify ...