#
DIFF.BLOG
New
Following
Discover
Jobs
More
Top Writers
Suggest a blog
Upvotes plugin
Report bug
Contact
About
Sign up
The home for great developer writing.
We surface the best developer writing from thousands of independent blogs, updated daily.
Join Diff.blog
TOPICS
security: Crypto Clipper uses Tor and worm-like propagation for persistence and control
1
·
Sujith Quintelier
·
June 18, 2026, 7:05 a.m.
cryptocurrency
malware
Cybersecurity
Tor
Summary
Microsoft Threat Intelligence reports on a cryptocurrency clipper malware campaign that utilizes Tor for control, spreads like a worm, steals wallet addresses, maintains persistence, and includes a lightweight backdoor for further activities.
Read full post on quintelier.dev →
MORE POSTS LIKE THIS
UAT-11795 deploys novel Starland RAT and bespoke WLDR C2 implant in financially motivated campaign
Blog Talosintelligence ·
Jul 16, 2026
Threats
rat
security: ACR Stealer: Two observed intrusion chains amid increased threat activity
Sujith Quintelier ·
Jul 17, 2026
ACR Stealer
malware
BlackToad Threat Actors Deploy Stealthy Phishing Lures
Securityonline ·
Jun 2, 2026
Cybercriminals
BlackToad
The Good, the Bad and the Ugly in Cybersecurity – Week 17
Sentinelone ·
Apr 24, 2026
Company
Cyber
Admitting the Elephantine Void Between Kinetic and Cyber Threats
Flying Penguin Blog ·
Jul 22, 2026
Energy
history
Ostium loses at least $24 million to oracle exploit
Molly White ·
Jul 17, 2026
Decentralized Finance (DeFi)
cryptocurrency
Discover more posts →
AUTHOR
RECENT POSTS FROM THE AUTHOR
Choose how you want to continue.
Continue with GitHub
Continue with Google