Content by Microsoft Defender Security Research Team and Microsoft Defender Experts (1)

Microsoft Defender Security Research Team and Microsoft Defender Experts break down a Windows crypto-clipper campaign that uses a bundled Tor proxy and worm-like USB propagation to maintain persistence, steal seed phrases and private keys from the clipboard, exfiltrate screenshots, and accept remote tasking via an EVAL-based backdoor.