Microsoft Warns CryptoBandits Malware Swaps Copied Crypto Wallet Addresses

Microsoft warned that CryptoBandits malware can replace a copied cryptocurrency wallet address with an attacker-controlled address, potentially redirecting funds during transfers. According to NS3.AI, the malware monitors a victim’s clipboard every 0.5 seconds to detect and alter copied wallet addresses. Microsoft said CryptoBandits can spread via USB drives. It can also disguise itself by converting documents, PDFs, and Excel files into malicious executables while keeping the same filenames, increasing the chance users will open them.