Microsoft Uncovers New Crypto-Theft Malware Spread via USB Drives

• June 21, 2026

Microsoft Identifies Crypto Clipper Malware Exploiting USB Devices

Security experts at Microsoft have discovered a new type of malicious software targeting cryptocurrency users. The malware, dubbed Crypto Clipper, utilizes USB drives as a vector to spread and compromise victims’ digital wallet credentials.

Crypto Clipper functions by monitoring the clipboard content on infected systems, searching for patterns that match cryptocurrency wallet addresses. When such an address is detected, the malware replaces it with one controlled by threat actors, enabling the interception and theft of funds when victims proceed with transactions.

The use of USB devices for distribution allows the malware to bypass certain network security measures, making it a particularly persistent threat. As users insert infected USB drives into their computers, the malware can automatically execute, silently initiating its credential-harvesting activities.

This discovery underscores the ongoing risks posed by physical media in the cybersecurity landscape, especially for individuals and organizations engaged in cryptocurrency transactions. Because Crypto Clipper specifically targets clipboard data tied to wallet addresses, it exploits a common practice where users copy and paste these lengthy strings during transfers.

Microsoft’s identification of this threat provides important insight into evolving attack methodologies aimed at digital currency users. While detailed technical specifications, infection rates, and mitigation strategies were not disclosed, the findings highlight the importance of exercising caution with removable storage devices and employing robust security protocols around cryptocurrency management.

With cryptocurrencies becoming increasingly mainstream, malware like Crypto Clipper exemplifies how attackers adapt to emerging financial technologies by developing specialized tools to pilfer assets directly from end users. Continued vigilance and awareness remain key components in defending against such targeted cyber threats.

Microsoft researchers have identified a new malware, Crypto Clipper, that steals cryptocurrency wallet credentials via USB drives.