Microsoft Discovers New Lightweight Backdoor that Steals Cryptocurrency

Microsoft discovers new lightweight backdoor that steals cryptocurrency

Microsoft says it has detected new self-propagating malware that spreads through USB drives in search of cryptocurrency credentials, which it then sends to attacker-controlled servers. The company named the worm Crypto Clipper because it monitors the contents of device clipboards for patterns consistent with wallet addresses or seed phrases. When found, the malware also takes five screenshots over a 10-second period. Both the credentials and the…

USB worm spreads crypto-stealing malware via Windows shortcut files

Threat actors targeting cryptocurrency wallets have been distributing clipboard-stealing malware with self-spreading capabilities and using the Tor network to conceal communication.

Microsoft Warns of New ‘Crypto Clipper’ Malware Spreading via Infected USBs

Microsoft uncovers a new Windows "clipper" malware spreading via infected USB drives that stealthily hijacks cryptocurrency wallet addresses and steals funds using the hidden Tor network.

Microsoft flags 'CryptoBandits' malware draining wallets

Microsoft has flagged a malicious program that has been operating quietly since February and targets Windows machines. The malicious program, dubbed CryptoBandits, can steal seed phrases, keys, and wallets through the Tor network and is transferable via USB drives.  In a blog post published on June 17th, Microsoft Threat Intelligence and Microsoft Defender experts exposed a malicious campaign that has been draining crypto wallets without victims…

From Wallet Hijacking To Remote Control: Microsoft Exposes A New Wave Of Crypto Malware Targeting Windows Users

Technology company Microsoft has reported the discovery of a Windows-based cryptocurrency clipper malware campaign that has been targeting users since February 2026. The threat, identified by Microsoft Threat Intelligence and Microsoft Defender Experts, combines clipboard theft, cryptocurrency wallet targeting, and remote access capabilities to steal digital assets and maintain control over compromised systems. The malware is designed to interce…

Microsoft warns of self-spreading malware that steals cryptocurrency

Microsoft has identified Crypto Clipper, a self-propagating malware that spreads via USB drives, stealing cryptocurrency credentials and sending them through Tor.