Microsoft warns of USB worm-like malware using Tor for stealth

Microsoft has identified a cryptocurrency clipper malware campaign, active since February 2026, that combines USB-based propagation, a Tor-hidden command-and-control infrastructure, and remote code execution capabilities. The malware steals cryptocurrency seed phrases and private keys while silently replacing wallet addresses copied to the clipboard with attacker-controlled alternatives. Microsoft found that the threat goes beyond traditional crypto-clippers, … The post Microsoft warns of USB worm-like malware using Tor for stealth appeared first on CyberInsider.