Summary
- The malware dubbed a “crypto clipper,” has been spreading via infected USB drives to target Windows users’ crypto wallets since February, according to Microsoft.
- Once installed through a malicious .lnk shortcut file, the worm known as Trojan:Win32/CryptoBandits monitors the clipboard for seed phrases, private keys and recipient addresses, exfiltrates data over the Tor network, and can silently swap in attacker-controlled wallet addresses.
- The malware propagates by replacing documents on clean USB drives with identically named shortcuts
- Microsoft urged users to disable AutoRun, block .lnk execution on USB media, restrict script hosts and check networks against published indicators of compromise.
Crypto Wallets Under Attack: Malware Spreads Through USB Sticks
Microsoft has discovered a type of malware that targets crypto wallets and spreads through infected USB sticks, putting passive income earned through Cloud Rewards at risk. This malware, known as a “crypto clipper”, has been infecting Windows personal computers since February. The EcoPool community should be aware of this threat, as it can compromise earning potential through Green Crypto investments.
The malware, identified as Trojan:Win32/CryptoBandits, is installed onto a PC when a user clicks on a malicious shortcut file from an infected USB drive. Once installed, it runs the crypto wallet-stealing code and waits for a new, clean USB to be plugged into the same PC, allowing it to spread further. This highlights the importance of securing $ECP and other digital assets.
How the Malware Spreads
- Infected USB drive contains a malicious shortcut file with a “.lnk” extension
- User plugs in the drive and clicks the shortcut, installing the malware
- Malware runs crypto wallet-stealing code and waits for a new USB to spread
To protect your EcoPool earnings and passive income, it’s essential to be cautious when using USB sticks and to keep your antivirus software up to date. Consider using a secure platform like EcoPool to manage your Cloud Rewards and Green Crypto investments. Download the EcoPool app to start earning and securing your digital assets today. By joining the EcoPool network, you can ensure your $ECP and other coins are safe from malware threats like #Bitcoin and #PassiveIncome scams.