Microsoft warns of 'Crypto Clipper' malware spread via USB drives
Microsoft has identified a new 'Crypto Clipper' malware that spreads via USB drives, targeting cryptocurrency wallets and private keys while using the Tor network for stealth.

Microsoft has issued a warning about a new strain of 'Crypto Clipper' malware that spreads through USB drives, targeting cryptocurrency wallets and private keys. The malware hides its command-and-control infrastructure behind the Tor network, making it harder to trace. This threat is particularly concerning given the current crypto landscape, where Bitcoin's price has rebounded above $70,000 following the April 2024 halving, which reduced miner rewards and historically precedes bull runs. The halving tightens supply, but it also pressures miners to sell coins to cover costs, potentially creating volatility that attackers exploit.
The malware combines data theft with remote code execution, effectively turning a financially motivated stealer into a lightweight backdoor, according to Microsoft's security researchers. This dual capability allows attackers to not only steal crypto assets but also gain persistent access to infected systems. For crypto traders, this underscores the importance of using hardware wallets and avoiding unknown USB devices. The timing aligns with a period of high on-chain whale concentration, where large holders control a significant portion of circulating supply, making them prime targets. Meanwhile, Bitcoin dominance has risen above 55%, indicating capital rotation from altcoins, which could amplify the impact of any security breach on market sentiment. NowPrice's crypto page provides real-time pricing for major assets, helping users monitor their portfolios for any suspicious activity.
Users should remain vigilant against physical vectors of attack, as USB-spread malware can bypass traditional network defenses. Regularly updating antivirus software and disabling autorun features on USB ports are recommended precautions. The crypto community should watch for further advisories from Microsoft and other security firms as this threat evolves. Additionally, monitoring exchange reserve drawdowns—which have fallen to multi-year lows—suggests investors are moving coins to cold storage, a trend that could be disrupted if such malware leads to forced liquidations. Broader macroeconomic factors, such as rising US Treasury yields and a strengthening DXY, may also influence risk appetite, making it crucial for traders to stay informed through reliable sources like NowPrice.