security: Crypto Clipper uses Tor and worm-like propagation for persistence and control

Microsoft Threat Intelligence described a cryptocurrency clipper campaign that steals and replaces wallet addresses, uses Tor for command-and-control, and spreads in a worm-like way. The malware also maintains persistence and includes a lightweight backdoor for follow-on activity.

• Source: Microsoft Security Blog