Hackers have targeted an unnamed Polish bank by placing a malicious file in Google reCAPTCHA to lure victims into downloading banking malware.