Microsoft warns of Crypto Clipper worm spreading via USB drives to hijack wallets (opens in new tab)

Microsoft has identified a persistent malware campaign dubbed Crypto Clipper that has been targeting Windows users since February 2026. The threat propagates like a worm by using infected USB drives to replace legitimate documents with malicious shortcut files. When a user clicks these shortcuts, the malware installs a payload that utilizes the Tor network to communicate with attacker-controlled servers. <a href="