Bitcoin Forum

https://i.imgur.com/jwDtIHX.png


this is my original ltc address. basically i add a random number inside it. copy paste here and then i remove that random number to make the paste work in here.


basically if i copy

and paste it anywhere it's auto change to

same thing for browser, notepad. any help please?

That is clipboard malware, better to flash your device and reinstall your OS for it not to steal coins from you while sending to someone.

Read this:
How to lose your Bitcoins with CTRL-C CTRL-V (https://bitcointalk.org/index.php?topic=5190776.0)

Clipboard malware can affect any device, the malware will replace your address to attackers address if you want to send the address to someone or while making bitcoin or other coin transaction.

I'd say your computer is infected, probably with clipboard malware.
for a start, I would follow this up https://forums.malwarebytes.com/topic/263988-btc-clipboard-virus/ you have a few steps to take, explained in detail.
Of course, I would rely on any cleaner, I would rather change the whole operating system with full delete of all apps.

However, you should need to be careful with all your transaction until you solve this problem.

Good job for detecting this and not clicking stuff too quickly.

Go do a fresh re-install of your operating system like what Charles-Tim said, and make sure you're downloading and installing the official software. Not something that you've downloaded through a sketchy torrent site.

Read: https://cryptosec.info/checklist

okay thank you for the suggestion and the links. problem started to happen 12~24 hours ago i think. i just woke up and notice the issue.

aside from what the other members have suggested for you to do you should also think back on what you did on your computer before the issue started happening so you won't make the same mistake again. anyway, sadly a lot of people have already fallen victim to the malware, it is good that you noticed it before making a transaction.

• Having a healthy web surfing activities is vital.
• Having a good Internet security or antivirus software is a good additional protective layer but don't forget to focus on the first one first.
• Downloading wallet software from official project website. You can find links from Coinmarketcap.com (https://coinmarketcap.com/) or Coingecko.com (https://www.coingecko.com/)
• When you make a transaction to someone, make sure you send a small amount first to test. If receiver actually received coin, you can complete your deal with that one in full amount

In addition, Binance Academy has an informative article How to secure your cryptocurrency (https://academy.binance.com/en/articles/how-to-secure-your-cryptocurrency).

Yes clipboard malware has been around for a while and many have been victimized because of this, especially those who are in a rush and not double ot triple checking the address. I also assume that you didn’t install any antivirus software like Avast.

I have installed it on my computer and have paid subscription along the way just to fully protect my computer from further incoming malware. It’s my mistake back then of not installing the antivirus which leads my wallet to get hacked for allowing myself to download the ZIP file with malware inside. I lost $12k that time and I still feel a bit of pain and regret of it though.

Make sure you backup all of your important files before making the full reset of your OS. Don’t delay. Just do it before something worse happens later on.

Be sure to buy a hardware wallet and check the address on the hardware wallet before pressing the button to send coins, then you will not make a mistake. A hardware wallet will help you protect yourself from viruses if you do not store the seed phrase from the hardware wallet on your computer.

The things that you did preceded that time might explain why you got the clipboard malware. Remember do you install pirated, shady applications, or do internet-related activities that might compromise your device(e.g. opening a file from spam email, etc).

It's a good idea if you comprehend why you got infected in the first place, that should make you aware of what things you did with your device to prevent future security concerns.

I hope you will be save there. This kind of keyboard hacking also happen to me. Whenever I copy Etherium or Bsc address and paste ,it paste automatically hacker address but thanks God my money save. Some YouTubers also made video on that malware and some also loses big. Better to change the OS and don't use third party software with crack.

You do have a quick mind after just waking up, we should all be aware of this clipboard malware and always check your address when filing, check the first three characters and last three characters of your address after inputting it, awareness is the key and of course, be sure to have a good anti-malware and anti-virus, it will help you save you a lot.

Seems there are 104 LTC in the other wallet https://blockchair.com/litecoin/address/LLbzRwX15FRFtzR8iZpzjHrXZfBGq3Kdxn from 347 transactions. So safe to assume 347 victims within 6 months. Damn...

It's because many advanced users also fall in this trap. Generally, most of such hacking attempts can trick the newbies while this method works for people who are in this space for years. I know one guy who lost a handsome amount of BTC with this trick last year while he is in crypto space for the last 5 years almost.

i have two other device which i connect using remote desktop (windows os) which i found if i connect to a particular remote desktop this malware things happened. if i disconnect the remote desktop copy paste is working fine. anyways my solution was i scan with malwarebyte. restart pc and seems problem is gone.

I think with  clipboard malware not only attack with Litecoin address but also ever get the same problem like OP but when use eth address, I want to see if OP can use with eth address will effective get  clipboard malware or only happening with LTC address only. Will  clipboard malware have different kinds with LTC address, BNB or ETH address until with Waves address. I ever saw with  clipboard malware trough eth address only and not ask my friend as victim to try copy and paste by using other network wallet, get trouble with  clipboard malware or not.

I think your device is infected. It is better for you to save the recovery phrases in a safe place and reinstall the system on the device to avoid the risk of theft. You should know very well that many users have lost their money due to the spread of viruses on the Internet. You can also use one of the paid antivirus programs to avoid machinations!!!

Irrespective of the address used, the malware replace what you copied and will replace your copied address with attackers address, so the address that will be pasted will be the attackers address, it can happen to any coin address, including bitcoin, ether, litecoin or any other coins. The best is to just avoid malware and keep our device clean.

Agree with compromising your clipboard, that's why changing address's when you are copy-pasting. That's one of the common scam techniques nowadays. Likely you click some links or installed something suspicious and that's how hackers took control of your clipboard. Be careful especially when you are on porn sites. Make sure to erase everything on your device and start fresh. And always try to use a hardware wallet to avoid such scam attempts.

I think sometimes going back to factory settings or reformatting will help wipe your browser off and storages can go off. This will help also. Scammers watch on their prey on a slightest mistake to attack your system or phone. To avoid this kind of problem is to avoid clicking random links or making download from untrusted website. Hackers know it is easier to get hold on people through porn sites, people fall more because of nudity.

So you had to have downloaded malware for this to happen right?  What if you just click on a link but don't do anything else?  Such as link in phishing email but you don't enter any information?  Or what about those youtube comments links that are most likely virus?

Hmm, it could be that particular remote desktop is the one that got infected. But still, we don't know for sure about the malware, so, you should be wary since there is a chance that the infected desktop may potentially transmit the malware directly into your devices.

If I'm not mistaken, there is a setting to disable or enable clipboard copy+paste on the remote desktop configuration. Maybe somehow that is where it started.

I remember same thing happened with me, in the early 2016s and for this I lost some of my money.
This happened with me with my BTC wallet address, when i try to deposit Bitcoins in my localbitcoins.com wallet , the address changes when i paste it.
At first I thought this was purposely caused by localbitcoins.com, but I was wrong.
I reinstalled my browser and that fixed it.
It’s just a malware OP and it has infected your Browser or maybe your OS, a reinstall will definitely help.
Hope this helps you OP.

Just clicking a link unknowingly if you don't have a good anti-malware or anti-virus it will download that malware, people involved in Cryptocurrency should be aware of the many risks not only on investing but how they manage their machines, it's not enough that you are a computer user you should be literate, knowledgeable and know how to take care of your PC, that clipboard malware is an old malware but it still exists, so check not only twice but thrice your address before sending.

 This is very dangerous of course and will threaten the assets you have, try to fix the device you are currently using, maybe there is something malware that is entering your device, if this continues to be allowed then the Litecoin assets you currently have will just disappear then try you do something so that everything avoids things that we do not want, Device security is indeed the main thing that we must rely on.

So having kaspersky total and then clicking on a phishing link even though you don't enter anything would infect your pc just like that or not?


What about those youtube comments like those that seem to be viruses from like bot accounts?  What happens there?

My friend also experienced this kind of similar thing like this several weeks ago when copying and pasting a Bitcoin wallet to receive any payment, fortunately she didn't notice and re-check it.
Good to see that you are aware at first about this.

Oh, that's it.  :)

Same thing, it can affect your computer and better to be safe always so check your computer to know if you are already compromise. Double check the address details before you proceed, this happened to many users already and they become a victim of those scam. Don’t just copy and proceed, better to double check it to avoid being scammed. If you see unfamiliar and suspicious links don’t click it and better to delete it.

great that the OP caught this early. it is always advisable to double-check the address because with the malwares that you are not aware of, you will be a victim of this attack. once you saw this changing address, better take care of your computer and change the OS.
if you look at the address given, it seems the scammer got a hold of several victims already. guess, they don't even know their computers are compromised.

Yeah, it's good that he double or triple check everything before sending to that address otherwise it's money lost already.

And it seems that this address have been active since last year. And has received a total of  3.12848847 LTC. Not that huge though, but still if this is the criminals address then this is a free money for him.

https://blockexplorer.one/litecoin/mainnet/address/LY5BTpQu6n7g2QFxvm7qYGvGXsSHUv7MuD?page=1

can you copy/paste cause any malware or that is not possible?