Windows Crypto Clipper Malware Exposed
ID: 1ee79907-53e2-53a9-ae30-e07d237ff060
STIX ID: report--1ee79907-53e2-53a9-ae30-e07d237ff060
Feed Name: securityonline.info
Threat Score
### Executive Summary: Microsoft Threat Intelligence reports a new Windows crypto-clipper (Win32/CryptoBandits.A) distributed via malicious .lnk shortcuts on compromised USB drives; the malware steals seed phrases and private keys, substitutes clipboard wallet addresses with attacker-controlled ones, captures screenshots, persists via scheduled tasks, spreads to other USBs, and exfiltrates data over a bundled Tor client while allowing remote command execution.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
