Pastebin comments push ClickFix JavaScript attack to hijack crypto swaps

This report details an active campaign where attackers promote a fake Swapzone.io arbitrage exploit via Pastebin and Google Docs, instruct victims to run a 'javascript:' snippet in their browser that loads an obfuscated payload which hijacks the Swapzone swap interface and replaces deposit addresses with attacker-controlled Bitcoin wallets, resulting in irrecoverable cryptocurrency theft.