Tag: cryptobandits

1 Attack Reports | 0 Vulnerabilities

Attack reports

Crypto Clipper uses Tor and worm-like propagation for persistence and control

A Windows-based cryptocurrency clipper has been actively targeting users since February 2026, employing sophisticated techniques to steal digital assets. The malware propagates through malicious shortcut files on USB devices, creating a worm-like infection chain. Once deployed, it utilizes Windows …
remote code execution
clipboard hijacking
wallet theft
usb worm
cryptocurrency clipper
2026-06-18
contebrew
cryptobandits
screenshot exfiltration
seed phrase stealing
tor proxy
Published: June 18, 2026
Downloadable IOCs: 16
Click here to see more Attack Reports