Microsoft Details Windows Clipper Malware Campaign Using USB LNK Worm and Tor-Based C2

Microsoft has disclosed details of a Windows-based cryptocurrency clipper campaign that has targeted users since February 2026. "The clipper in this campaign relies on Windows Script Host and ActiveX-driven logic to launch a bundled Tor proxy and poll a hidden-service C2 [command-and-control] server

Related Stories

China-Linked SprySOCKS Backdoor Expands to Windows with Driver-Based Stealth

📰

Microsoft resolves Windows update issues caused by WUSA installer errors

GreatXML Vulnerability Circumvents Windows BitLocker Using Recovery Partition XMLs

📰

Patch Tuesday Sees Heaviest Security Fixes in June 2026 History