#
DIFF.BLOG
New
Following
Discover
Jobs
More
Top Writers
Suggest a blog
Upvotes plugin
Report bug
Contact
About
Privacy
Sign up
The home for great developer writing.
We surface the best developer writing from thousands of independent blogs, updated daily.
Join Diff.blog
TOPICS
security: Crypto Clipper uses Tor and worm-like propagation for persistence and control
·
Sujith Quintelier
·
June 18, 2026, 7:05 a.m.
Cybersecurity
cryptocurrency
malware
Tor
Summary
Microsoft Threat Intelligence reports on a cryptocurrency clipper malware campaign that utilizes Tor for control, spreads like a worm, steals wallet addresses, maintains persistence, and includes a lightweight backdoor for further activities.
Read full post on quintelier.dev →
MORE POSTS LIKE THIS
ClearFake WebDAV infection chain delivers Amatera stealer, ZigCryptoStealer, and NetSupport Manager
Blog Talosintelligence ·
Sep 8, 2026
Cisco Talos Antivirus
Cisco Talos Malware Protection
security: Impersonating IT support: how threat actors turn a remote session into enterprise-wide access
Sujith Quintelier ·
Sep 3, 2026
Cybersecurity
microsoft teams
BlackToad Threat Actors Deploy Stealthy Phishing Lures
Securityonline ·
Jun 2, 2026
Cybercriminals
BlackToad
The Good, the Bad and the Ugly in Cybersecurity – Week 17
Sentinelone ·
Apr 24, 2026
Company
Cyber
Pluralistic: Israeli ad-tech company was a delivery system for "mercenary spyware" (17 Oct 2026)
Pluralistic: Daily links from Cory Doctorow ·
Oct 17, 2026
ad blockers
Ad tech
How Do Ransomware Attacks Work?
neemaasharma-boop ·
Oct 5, 2026
Cybersecurity
Cybersecurity
Discover more posts →
AUTHOR
Advertise
Sponsor diff.blog
Put your product in front of developers who read and write about their craft. One exclusive sponsor at a time.
Become a sponsor →
RECENT POSTS FROM THE AUTHOR
Choose how you want to continue.
Continue with GitHub
Continue with Google
By continuing, you agree to our
Privacy Policy
.