Microsoft Details Windows Clipper Malware Campaign Using USB LNK Worm and Tor-Based C2

Summary

Microsoft has disclosed details of a Windows-based cryptocurrency clipper campaign that has targeted users since February 2026 with clipboard-intercepting malware with self-spreading capabilities and using the Tor anonymity network to hide communication. "The clipper in this campaign relies on Windows Script Host and ActiveX-driven logic to launch a bundled Tor proxy and poll a hidden-service C2

Lotu Radar provides attributed news summaries and links to the original publisher. Full reporting and copyright remain with the source.