The hackers use fake CAPTCHA pages—which are designed to mimic standard security checks—to trick users into installing malicious software (“Stealthy StealC Information Stealer”) via keyboard commands.

A REST API (short for Representational State Transfer Application Programming Interface) is a way two separate pieces of software can talk over the internet using standard rules. At its core, it lets ...