Safety

Microsoft Sounds the Alarm on 'Crypto Clipper' Malware — Here's How It Steals Your Crypto Through USB Drives

June 19, 2026, 5:33 AM UTC (105 days ago) · 1 source · Summarized by CryptoBipto

Microsoft has issued a warning about a malware strain called 'Crypto Clipper' that spreads through infected USB drives. The malware silently monitors clipboard activity and replaces copied cryptocurrency wallet addresses with attacker-controlled addresses, redirecting funds to hackers. Users who copy-paste wallet addresses during transactions are particularly vulnerable.

WHY IT MATTERS

Imagine you're writing a check and someone secretly changes the recipient's name right before you seal the envelope — that's essentially what Crypto Clipper does, but digitally. When you copy a crypto wallet address (a long string of letters and numbers, like a bank account number for crypto), this malware swaps it with the hacker's address. Since crypto transactions can't be reversed — there's no bank to call for a refund — your money is gone for good. This is a reminder that even basic habits like plugging in a USB drive can put your crypto at risk, and why it's crucial to always double-check wallet addresses before hitting send.

Crypto Clipper malware represents a deceptively simple but highly effective attack vector. Rather than attempting to crack encryption or break into exchanges, the malware exploits a common user behavior — copying and pasting wallet addresses.

Read the full analysis with a CryptoBipto membership

Members can read the full analysis of every story, not just the headline.

Get started

SOURCES

Source

MalwareCrypto SecurityClipboard HijackingMicrosoftUser Safety