Netcrook
#clipboard hijacking
Opera’s New Paste Protect Targets a Quietly Dangerous Copy-Paste Attack Path
Opera has added a default-on browser defense aimed at clipboard hijacking and command injection, a reminder that the paste action can carry more risk than it appears.
Opera Puts a Safety Rail Around the Clipboard
Paste Protect is built into the browser, enabled by default on Windows, macOS, and Linux, and aimed at cutting off clipboard hijacking and ClickFix-style code injection before a user can paste trouble into place.
Fake Popularity, Real Theft: The Clip-on Trap Hiding Behind GitHub Stars and VirusTotal Votes
A deceptive trust layer is being abused to make a crypto clipper look safer than it is, turning stars, reviews, and clipboard swaps into a quiet route to theft.
CryptoBandits Turns a Crypto Stealer Into a Hidden Remote-Control Tool
The malware’s use of Tor and a local SOCKS5 proxy suggests a design built for both wallet theft and quieter operator tasking, a combination that complicates endpoint defense.
Windows Script Hosts and Tor: The Hidden Path in a Crypto Clipper Campaign
A Windows-based crypto clipper reportedly leans on WScript, ActiveXObject, and Tor, a combination that can blur the line between ordinary scripting and malicious automation.
Rokarolla Turns Android Convenience Into a Fraud Pipeline
A newly described Android Trojan is tied to crypto and banking targets, showing how clipboard access, call handling, and accessibility abuse can become a practical fraud toolkit.
Rokarolla Turns an Android Phone into a Payment-Tampering Tool
Security researchers say the new banking trojan blends PIN capture, SMS interception, clipboard rewriting, and security-control suppression into one mobile fraud stack.
Clipboard Crime by Design: Script Chains Turn a Simple Paste into Crypto Risk
A reported CountLoader campaign shows how obfuscated JavaScript and PowerShell can be chained into a clipboard-hijacking clipper aimed at cryptocurrency wallets.
When a Loader Hides in Plain Sight, the Clipboard Becomes the Target
A reported CountLoader campaign shows how Windows-native scripts, staged execution, and memory-resident payloads can turn a routine infection path into a theft mechanism aimed at crypto users.