Cybersecurity officials warned that fake CAPTCHA pages are being used to trick users into pasting malicious commands into Windows Run, enabling stealthy deployment of infostealers such as SectopRAT.
Microsoft’s threat intelligence team has disclosed a Windows crypto clipboard trojan active since February 2026. The malware combines worm-like propagation, clipboard hijacking and Tor anonymous communication to attack digital asset users.
Microsoft’s security research team has identified Crypto Clipper, a cryptocurrency-stealing Trojan active since February 2026. The malware spreads through malicious .lnk shortcuts on USB devices, monitors clipboards, steals seed phrases and private keys, replaces crypto transfer addresses, uploads screenshots, and can receive remote code execution commands.
