Bleepingcomputer

ClickFix JavaScript Attack Targets Cryptocurrency Users via Pastebin

First seen 15 Feb 2026, 19:07 UTC • Bleepingcomputer

•22.3

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Threat actors are exploiting Pastebin to launch a ClickFix-style attack that deceives cryptocurrency users into executing malicious JavaScript in their browsers. This attack hijacks Bitcoin swap transactions, redirecting funds to wallets controlled by the attackers, and relies on social engineering tactics promising high returns from a fake Swapzone.io arbitrage exploit.

How this analysis works

Timeline

2026-02-15

Attack reported using Pastebin for ClickFix-style JavaScript attack

Attack Flow

Continue Reading

Ghost CMS SQL Injection Exploits 700+ Sites in Ongoing ClickFix Campaign Russian GRU Hackers Use Fake CAPTCHAs to Compromise Ukrainian Users Kimsuky Exploits South Korean Groupware Vendors with New Gomir Variants Rapid7 Reports Surge in Vulnerability Exploitation Outpacing Patching Efforts ACSC Issues Critical Alert on Exploited CMS Vulnerabilities Cybercriminals Exploit BNB Chain for Malware via Fake CAPTCHAs

ClickFix JavaScript Attack Targets Cryptocurrency Users via Pastebin

Article Content

Timeline

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading