Users cannot distinguish legitimate security prompts from malicious social engineering attacks

Knowledge workers and everyday internet users face a critical vulnerability where sophisticated fake CAPTCHAs and security verification pages trick them into running malicious scripts on their machines. Current browser security and user education fail to prevent these attacks because the fake prompts mimic legitimate security interfaces so closely that even technically-aware users second-guess their instincts. Users need a reliable way to verify whether a security prompt is genuine before following its instructions.