logo

New ErrTraffic service enables ClickFix attacks via fake browser glitches

ID: 80aebea6-4b52-5f2c-8d75-3bed391ce3e6

STIX ID: report--80aebea6-4b52-5f2c-8d75-3bed391ce3e6

Feed Name: Bleeping Computer

Threat Score
70/100

Date Published: 2025-12-30

Date Updated: 2026-04-20

Author: Bill Toulas

...
...

ErrTraffic is a self-hosted traffic distribution platform sold on Russian-speaking forums that automates ClickFix social-engineering lures by modifying a compromised site's DOM to display convincing 'glitches' and prompt victims to install updates or run commands; successful interactions place a PowerShell command in the clipboard to download payloads mapped per OS (Lumma, Vidar on Windows; Cerberus on Android; AMOS on macOS; Linux backdoors), supports geolocation/OS fingerprinting with CIS exclusions, and is marketed with high conversion claims.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.