Crypto Clipper uses Tor and worm-like propagation for persistence and control

Reported 18 Jun 2026 by otx · Severity: medium

A Windows-based cryptocurrency clipper has been actively targeting users since February 2026, employing sophisticated techniques to steal digital assets. The malware propagates through malicious shortcut files on USB devices, creating a worm-like infection chain. Once deployed, i