Microsoft Describes USB Malware That Swaps Crypto Addresses on Copy and Paste

Microsoft has identified USB-spreading malware that silently replaces copied cryptocurrency wallet addresses with attacker-controlled addresses before the user pastes the address. @CoinDesk reported the malware spreads through USB devices and alters addresses during copy-and-paste operations in cryptocurrency transactions.

Users should disable AutoRun for USB devices to reduce infection risk, according to the report.

Lnk file execution to reduce infection risk, the same report stated. @CoinDesk reported that the malware targets cryptocurrency transfers by hijacking the address replacement step before confirmation.