I've seen sites with similar fake captchas posted twice in the last month by old time regular users. My guess is that the sites were infected after they saw and decide to post it here.

As a workaround, is it possible to disable Ctr+R to add some friction in case I am distracted?