New Cybercrime Tool ErrTraffic Let Attackers Automate ClickFix Attacks

Researchers observed ErrTraffic, a professionally built ClickFix automation kit sold on underground forums, which injects JavaScript into compromised sites to display convincing fake errors that prompt users to paste PowerShell commands from their clipboard; campaigns using the tool report high conversion (~60%), deliver infostealers and banking trojans across Windows, Android, macOS, and Linux, and are being actively promoted and used by criminal actors.