Microsoft's Threat Intelligence Team has identified a new Windows clipboard trojan that poses a significant threat to cryptocurrency users. Active since February 2026, this malware utilizes worm-like propagation and clipboard hijacking techniques to covertly spread and intercept cryptocurrency wallet addresses. The trojan also employs Tor-based anonymous communication to enhance its stealth capabilities, making it a formidable tool for cryptojacking activities.