logo

Windows Crypto Clipper Malware Exposed

ID: 1ee79907-53e2-53a9-ae30-e07d237ff060

STIX ID: report--1ee79907-53e2-53a9-ae30-e07d237ff060

Feed Name: securityonline.info

Threat Score
75/100

Date Published: 2026-06-25

Date Updated: 2026-06-25

Author: Do Son

...
...

### Executive Summary: Microsoft Threat Intelligence reports a new Windows crypto-clipper (Win32/CryptoBandits.A) distributed via malicious .lnk shortcuts on compromised USB drives; the malware steals seed phrases and private keys, substitutes clipboard wallet addresses with attacker-controlled ones, captures screenshots, persists via scheduled tasks, spreads to other USBs, and exfiltrates data over a bundled Tor client while allowing remote command execution.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.