ErrTraffic Emerges as a New Tool for Automating ClickFix Cyberattacks

Hudson Rock researchers uncovered ErrTraffic v2, a commercially sold ClickFix toolkit promoted by an actor calling themselves 'LenAI' that uses deceptive browser overlays to trick victims into pasting verification codes into Windows Run or PowerShell, thereby executing stealth payloads. The service operates as a Traffic Distribution System delivering platform-specific payloads (Windows, macOS, Android, Linux), features a dashboard for campaign metrics with reported infection rates up to ~60%, avoids targeting CIS regions, and is designed to evade browser and endpoint defenses by relying on user-driven execution rather than drive‑by exploits.