ClickFix in action: how fake captcha can encrypt an entire company