Pastebin comments push ClickFix JavaScript attack to hijack crypto swaps
Over Security - Cybersecurity news aggregator [Unofficial]
February 15, 2026
Threat actors are abusing Pastebin comments to distribute a new ClickFix-style attack that tricks cryptocurrency users into executing malicious JavaScript in their browser, allowing attackers to hijack Bitcoin swap transactions and redirect funds to attacker-controlled wallets.
Discussion in the ATmosphere