It turns out that some participants post .blend files, which are used by the popular Blender open-source 3D modeling system.
The hackers use fake CAPTCHA pages—which are designed to mimic standard security checks—to trick users into installing malicious software (“Stealthy StealC Information Stealer”) via keyboard commands.