ErrTraffic Service Automates ClickFix Attacks Using Fake Browser Glitches

A new cybercrime tool called ErrTraffic has emerged, enabling attackers to automate ClickFix attacks by injecting fake browser glitches into compromised websites. This tool leverages a single line of JavaScript code to display convincing visual errors, such as broken text and corrupted fonts, which are tailored to the victim's device and language. The psychological manipulation prompts users to take corrective action, such as downloading malicious payloads or running harmful commands, under the guise of fixing browser or system issues.

ErrTraffic is being sold on underground forums for approximately $800, making it accessible to less skilled cybercriminals and facilitating attacks across multiple platforms, including Windows, Android, macOS, and Linux. The tool's professional design and automation features allow for large-scale deployment, raising concerns about increased supply chain and social engineering risks for organizations using platforms like WordPress, Joomla, and cPanel. Security researchers have highlighted the need for heightened vigilance and defensive strategies to counter this evolving threat.