CryptoBandits Malware Doubles as a Backdoor, Abuses Tor for Stealthy C2

**CryptoBandits** is a dual-function malware family that combines credential and cryptocurrency wallet theft with a persistent backdoor; it establishes a local SOCKS5 proxy on infected hosts and routes all command-and-control and exfiltration traffic over the Tor network, making network-level detection and IP-based blocking ineffective—recommended response for confirmed infections is full system reimaging and credential rotation.