Microsoft flags Windows crypto clipper stealing seed phrases, keys, and wallets through Tor and USB drives

Microsoft Threat Intelligence has tracked a Windows cryptocurrency clipper, dubbed CryptoBandits, that's been active since February 2026.