Microsoft has identified a new Excel malware campaign that uses a novel technique to bypass traditional antivirus software and other security solutions.

According to the firm, cybercriminal syndicate Chimborazo is distributing a rigged Excel document capable of infecting victims with the password-stealing GraceWire trojan. Before the Excel file is downloaded, however, the victim is asked to fill out a CAPTCHA form, used in legitimate scenarios to establish whether a user is human or not. 

Source Article