The hackers use fake CAPTCHA pages—which are designed to mimic standard security checks—to trick users into installing malicious software (“Stealthy StealC Information Stealer”) via keyboard commands.
It turns out that some participants post .blend files, which are used by the popular Blender open-source 3D modeling system.