Microsoft said CryptoBandits.A has been active since February 2026 and spreads by using malicious Windows shortcut files placed on USB storage devices.
According to NS3.AI, the malware is designed to steal cryptocurrency wallet secrets and to replace copied cryptocurrency addresses.
Microsoft said the malware monitors the system clipboard about every 500 milliseconds and uses Tor for command-and-control communications.
Microsoft Says CryptoBandits.A Has Targeted Crypto Wallet Secrets Since February 2026
2026-06-22 07:03:14
Disclaimer:
1. The information provided does not constitute investment advice. Investors should make independent decisions and bear all risks themselves.
2. The copyright of this content belongs to the original author. The views expressed herein are solely those of the author and do not represent the stance or position of this website.
Next article：
EasyJet拒绝Castlelake三次收购提议
