SecuriTricks - clipboard hijacking

Operation DualScript: Multi-Stage PowerShell Malware Targets Crypto

Operation DualScript is a sophisticated multi-stage malware campaign targeting cryptocurrency and financial activities. It utilizes Windows Scheduled Tasks, VBScript launchers, and PowerShell execution to maintain persistence while minimizing disk artifacts. The attack operates through two parallel…

powershell

cryptocurrency

Published: March 31, 2026

Downloadable IOCs: 1

HUMINT Operations Uncover Cryptojacking Campaign: Discord-Based Distribution of Clipboard Hijacking Malware Targeting Cryptocurrency Communities

A sophisticated cryptocurrency theft operation, orchestrated by the threat actor 'RedLineCyber', has been uncovered. The actor distributes a malicious executable named 'Pro.exe', a Python-based clipboard hijacking trojan designed for silent cryptocurrency theft. This malware continuously monitors t…

Published: January 15, 2026

Downloadable IOCs: 2

Victims risk AsyncRAT infection after being redirected to fake Booking.com sites

Cybercriminals have launched a campaign redirecting users from gaming sites and social media to fake Booking.com websites. The scam uses fake CAPTCHA prompts to trick visitors into executing malicious commands on their devices. If successful, the attack downloads and installs AsyncRAT, a backdoor T…

Published: June 3, 2025

Downloadable IOCs: 14

Evasive Campaign Pushing Legion Loader Malware

A highly evasive web campaign is exploiting clipboard hijacking to trick users into running MSI files containing Legion Loader malware. The campaign employs multiple cloaking strategies, including captcha pages, disguised blog sites, and dynamic download URLs. The malicious script instructs victims…

Published: April 11, 2025

Downloadable IOCs: 83

Proactive ClickFix Threat Hunting with Hunt.io

ClickFix is a browser-based delivery technique that uses deceptive prompts and clipboard hijacking to trick users into executing malicious commands. Cybercriminals and advanced actors employ this method to deploy malware, primarily information stealers. The technique involves luring users with fake…

browser-based attacks

2025-04-04

clipboard hijacking

Published: April 4, 2025

Downloadable IOCs: 0

Tag: clipboard hijacking

Attack reports

Operation DualScript: Multi-Stage PowerShell Malware Targets Crypto

HUMINT Operations Uncover Cryptojacking Campaign: Discord-Based Distribution of Clipboard Hijacking Malware Targeting Cryptocurrency Communities

Inside DPRK's Fake Job Platform Targeting U.S. AI Talent

XCSSET evolves again: Analyzing the latest updates to XCSSET's inventory

Fix the Click: Preventing the ClickFix Attack Vector

Victims risk AsyncRAT infection after being redirected to fake Booking.com sites

Evasive Campaign Pushing Legion Loader Malware

Proactive ClickFix Threat Hunting with Hunt.io