Microsoft Reveals New Encrypted Clipboard Trojan Threat: Can Spread Covertly and Hijack Cryptocurrency Wallet Addresses

Microsoft’s Threat Intelligence Team has disclosed a Windows clipboard cryptojacking trojan that has been active since February 2026. This malware employs a combination of “worm-like propagation,” “clipboard hijacking,” and “Tor-based anonymous communication” to target cryptocurrency users.