Microsoft flags Tor-based crypto clipper hitting Windows users

Microsoft Threat Intelligence and Microsoft Defender Experts said they identified a Windows-based crypto clipper that has been hitting users since February 2026. The malware spreads through malicious .lnk shortcuts and USB drives, launches a bundled Tor proxy via Windows Script Host and ActiveX…