Security Feed
  1. Archives

Feb 15 2026 Pastebin comments push ClickFix JavaScript attack to hijack crypto swaps

Source

Threat actors are abusing Pastebin comments to distribute a new ClickFix-style attack that tricks cryptocurrency users into executing malicious JavaScript in their browser, allowing attackers to hijack Bitcoin swap transactions and redirect funds to attacker-controlled wallets. [...]

Posted by Lawrence Abrams on Sun 15 February 2026 in BleepingComputer.

Tags: Security.

Categories

  1. Ars Technica
  2. AWS Security
  3. BleepingComputer
  4. Brian Krebs
  5. Bruce Schneier
  6. GCP Security
  7. Google Project Zero
  8. The Daily Swig
  9. The Guardian
  10. The Register
  11. Threatpost

Tag cloud

  • Security
  • Uncategorized
  • Security, Identity, & Compliance
  • Microsoft
  • Biz & IT
  • Security Blog
  • AI
  • Security & Identity
  • Google
  • CryptoCurrency
  • Announcements
  • Foundational (100)
  • Legal
  • Artificial Intelligence
  • A Little Sunshine
  • privacy
  • Mobile
  • Apple
  • squid
  • Advanced (300)
  • Intermediate (200)
  • hacking
  • Technical How-to
  • The Coming Storm
  • LLM

Security Feed. Powered by Pelican and m.css. Code is available on GitLab.