A new Russian malware service called DOUBLECUP ClickFix hides malicious code inside PNG images stored in a victim’s browser cache. The service uses fake CAPTCHA prompts to trick victims into running commands copied to their clipboard. Those commands recover the hidden code and launch malware on Windows and macOS devices. SOCRadar’s Threat Research Unit says…