Malware and Online Fraud

Security researchers report that a cybercrime platform called ErrTraffic, sold on underground forums since early December 2025, is rapidly enabling attackers to infect users by injecting fake browser or font error popups into compromised websites that trick visitors into pasting malicious commands into PowerShell or other system terminals. The JavaScript‑based tool automatically tailors messages by OS, browser and language, evades traditional download‑focused defenses, and is achieving conversion rates near 60%, delivering Windows infostealers like Lumma and Vidar and Android banking trojans while using a central control panel with geographic filtering.