Buy Crypto
Pay with
USD
USD
Buy & Sell
Hot
Supports Visa, Mastercard, SEPA & more
P2P
0 Fees
Flexible trading, zero fees
Gate Card
Use your crypto for payments worldwide
Markets
Trade
Basic
Advanced
Futures
Futures
Access hundreds of perpetual contracts
CFD
Gold
One platform for global traditional assets
Options
Hot
Trade European-style vanilla options
Unified Account
Maximize your capital efficiency
Demo Trading
Introduction to Futures Trading
Learn the basics of futures trading
Futures Events
Join events to earn rewards
Demo Trading
Use virtual funds to practice risk-free trading
Stocks
CFD
U.S. stock CFD derivatives
US Stocks
Access real US stocks and ETFs
HK Stocks
Trade quality Hong Kong-listed stocks
Stock Futures
High leverage, 24/7 trading
Tokenized Stocks
Backed by real stock assets
IPO Access
Unlock full access to global stock IPOs
GUSD
Mint GUSD for Treasury RWA yields
Stocks Activities
Trade Popular Stocks and Unlock Generous Airdrops
Earn
Launch
CandyDrop
Collect candies to earn airdrops
Launchpool
Quick staking, earn potential new tokens
HODLer Airdrop
Hold GT and get massive airdrops for free
IPO Access
Unlock full access to global stock IPOs
Alpha Points
Trade on-chain assets and earn airdrops
Futures Points
Earn futures points and claim airdrop rewards
Investment
Square
Square
Post, share, and explore crypto trends
Live
moments live
Live crypto market analysis
Chat
Chat with crypto traders
News
What is happening in crypto
flower_head
More
Promotions
AI
Others
TradFi
2026 World Cup
Rewards
Square
Latest
Hot
News
Profile

Microsoft discovers Windows-based encrypted clipboard Trojan horse

CoinNetwork
robot
Abstract generation in progress
CoinWorld News, Wu says has learned that Microsoft's Threat Intelligence Team and Microsoft Defender Expert Team have discovered a Windows-based encrypted clipboard Trojan horse that has been affecting users since February 2026. The malware spreads via malicious .lnk shortcuts, relies on Windows Script Host and ActiveX to launch a built-in Tor proxy, and polls hidden service C2 servers, capable of high-frequency theft of clipboard data, screen capture, replacement of cryptocurrency wallet addresses, and exfiltration of mnemonic phrases, private keys, and other information through Tor. Microsoft states that this Trojan also has worm-like propagation capabilities, hiding original files within USB storage devices and creating malicious shortcuts with the same name, while using scheduled tasks to achieve execution and persistence. Microsoft Defender Antivirus detects it as Trojan:Win32/CryptoBandits.A.
View Original
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
  • Reward
  • 6
  • 2
  • Share
Comment
Add a comment
Add a comment
AirdropOnTheDune
· 5h ago
This worm can also hide in USB drives to create doppelgängers, too shady.
View OriginalReply0
ChillBlock
· 6h ago
Windows users are trembling, the clipboard has become a high-risk zone
View OriginalReply0
ReefUnderTheMoonlight
· 6h ago
As long as Defender can block it, that's fine, but I no longer dare to copy the address.
View OriginalReply0
BorrowedSun
· 6h ago
Is it already being rumored since February 2026? Microsoft is only now disclosing it.
View OriginalReply0
TheWindOnTheBridgeIsTooStrong.
· 6h ago
CryptoBandits—this name is pretty straightforward: they’re all about snatching from the crypto world.
View OriginalReply0
OwlMarketMonitoringLamp
· 6h ago
Tor + Clipboard Monitoring + Screenshot Capture, a hacker combo that covers all bases.
View OriginalReply0

  • Pinned

Sitemap