CryptoBandits Steals Crypto via USB Drives, Hides Behind Tor
Microsoft has detailed CryptoBandits, a Windows trojan spreading via USB drives since February 2026. It swaps wallet addresses in the clipboard and exfiltrates seed phrases over the Tor network.



