Published Jun 19, 2026, 8:48 AM ET · Updated 5 months ago · 1 source
THE BLOCK: Microsoft flags CryptoBandits, a worm that hijacks crypto wallets by swapping clipboard addresses and spreads through infected USB drives. Active since February, it monitors the clipboard every 0.5 seconds for seed phrases and private keys, and silently swaps your paste for the attacker's address.
TheBlockCo
·
Original Report
THE BLOCK: Microsoft flags CryptoBandits, a worm that hijacks crypto wallets by swapping clipboard addresses and spreads through infected USB drives. Active since February, it monitors the clipboard every 0.5 seconds for seed phrases and private keys, and silently swaps your paste for the attacker's address.