Microsoft has identified Crypto Clipper, a self-propagating malware that spreads via USB drives, stealing cryptocurrency credentials and sending them through Tor.
Crypto Clipper takes five screenshots over 10 seconds
Jun 19, 2026
10:55 am
What's the storyMicrosoft has discovered a new strain of self-propagating malware, dubbed "Crypto Clipper." The worm spreads through USB drives and targets cryptocurrency credentials.
Once it gets hold of the information, Crypto Clipper sends it to servers controlled by attackers.
Microsoft discovers new lightweight backdoor that steals cryptocurrency
Microsoft finds USB worm that steals cryptocurrency through clipboard hijacking and Tor
Microsoft Flags USB Crypto Clipper Hijacking Wallets
Microsoft identifies malware 'worm' that hijacks crypto wallets, spreads through USB drives
Microsoft Warns of New USB-Based Malware Targeting Crypto Users
USB worm spreads crypto-stealing malware via Windows shortcut files
Microsoft Details Windows Clipper Malware Campaign Using USB LNK Worm and Tor-Based C2
CryptoBandits Malware Doubles as a Backdoor, Abuses Tor
Microsoft scopre nuova backdoor sfruttata per rubare criptovalute
Minaccia cripto: il malware si diffonde via USB, monitora gli appunti e ruba soldi
Crypto Clipper spreads over USB and communicates over Tor.
Microsoft discovered a self-spreading USB worm active since February that monitors clipboards for crypto wallets and routes…
USB-spreading crypto clipper targets wallets and private keys while hiding its infrastructure behind the Tor network.
The software intercepts shortcut files and directs them to install a worm that harvests private keys from the Windows clipboard…
Microsoft alerted about new malware spreading via flash drives that targets bitcoin and crypto wallet security.
Threat actors targeting cryptocurrency wallets have been distributing clipboard-stealing malware with self-spreading capabilities…
