Evidence has emerged that people as well as malware are being used to defeat CAPTCHAs, challenge-response systems that are often used to stop the automatic creation of webmail accounts by spammers. CAPTCHAs typically help ensure that online accounts can't be created until a user correctly identifies letters depicted in an image.