Crypto Clipper Malware Uses Tor, USB Propagation, and Worm-Like Behavior to Steal Cryptocurrency
A sophisticated cryptocurrency clipper malware campaign has been active since February 2026, using Tor for command and control, spreading via malicious USB drives, and employing worm-like propagation.