๐จ NEW MALWARE ALERT ๐จ
Microsoft just uncovered a terrifying new cyberattack technique that's already spreading across the globe.
The worm, dubbed "Crypto Clipper," doesn't need your permission to install. It spreads silently through USB drives โ specifically via .lnk files (which contain executable code).
Here's how it works:
1๏ธโฃ Infect a USB drive with a .lnk file
2๏ธโฃ Plug into any computer
3๏ธโฃ The malware checks if it's already installed. If not, it downloads itself via Tor
4๏ธโฃ It monitors your clipboard for cryptocurrency wallet addresses and seed phrases
5๏ธโฃ When found, it steals them AND takes 5 screenshots over 10 seconds (likely for social engineering or selling on dark web)
6๏ธโฃ It deploys a local Tor client + SOCKS5 proxy to hide its communications
7๏ธโฃ MOST INSIDIOUS: It replaces wallet addresses in your clipboard with attacker-controlled ones, so any crypto you send goes straight to them
This turns every infected machine into a backdoor AND an automated money laundering operation.
Microsoft says: "The combination of Tor-routed C2, clipboard targeting, screenshot capture, and remote code execution gives attackers both immediate monetization paths and continued control over compromised devices."
This is the future of cybercrime โ lightweight, self-propagating, and nearly impossible to detect without specialized tools.
Credit: joshuark on Slashdot for breaking this story

Microsoft Discovers Cryptocurrency Stealer That Spreads Through USB Drives and Uses Tor - Slashdot
Ars Technica