Bitcoin Forum

Recently I read 2-3 articles about Clipboard hacking. Clipboard hacking works through some malware in your computer silently. It mainly works for wallets. While you copy any wallet to send funds and paste it to the recipient address bar, it will paste the pre wallet which was set by the hacker on your clipboard. You might be thinking certainly that you have copied and pasted the correct wallet. But later you see, the fund goes to the hacker wallet. So, be careful while you send funds, make sure you are pasting the desired wallet. 

If people just know how to double check or even triple check from the first 5 characters and last 5 characters of the wallet address before sending, clipboard hacking will be avoided somehow.

Clipboard hacking can be avoided and minimize if the sender will check the last 2 digits and first 2 digits of wallet and almost when we send funds to others we carefully checked the address.

This is exactly what I always reminds to people that even though people have their 2fa authentication or even hardware wallet as their security but this thing could just replace the clipboard and the victim will be done for. It's like this malware is penetrating right through the weakness taking advantage of the randomness of the address that people usually  not bother to remember and I always told people to check the address they want to send twice or even more before clicking the send button. I also heard that this clipboard hacking could come from random browser extension aswell since people nowadays uses either online wallet like MEW or metamask.

This.  I know I always check manually, but I'm sure a lot of people don't. 

I also generally try to avoid sites and downloads which might be fishy, and I have yet to have a problem with malware...but you never know where it's going to come from, so you need to watch out all the time.

I can't stand 2FA personally, just because it's more inconvenient than it needs to be just to send bitcoin or an alt but I do realize how important it could end up being.  I do fully agree about hardware wallets and think more people should use them.  They're interesting little devices as well, and some of them should be affordable for anyone with crypto to protect.  I think you can get a keepkey for like $20, which is a good deal in my opinion.

Hacking the clipboard has long been done and many are affected by this malware. My friend also experienced clipboard hacking when he wanted to buy Ethereum. He copied his own address and then copied it and gave it to me through the massanger. But when Ethereum was sent he realized that the address given was not his. Then it is checked, it turns out that the computer is infected with clipboard malware.

So, to be more secure, first check the copied address, make sure the address is correct and is yours.
The most important thing is to use your best antivirus to prevent malware from entering your computer or device,
don't click on unfamiliar advertisements or install unfamiliar applications.

Good advice as these types of hacks are becoming more common place and it's very disheartening to see your funds disappear to an unknown address where they can't be recovered so if you are managing your own crypto funds use a hardware wallet if they are substantial and, always check and re-check that you're sending to the correct address each time you do so to avoid losing funds

Have heard something like this before. Maybe this clipboard or maybe copy paste malware (when i don't know it is named clipboard, i say it copy paste virus) will effective for people who never re-check bitcoin or other coin wallet address that they submitted and then their money go to the owner of the wallet address. And a lot of people here said, at first, always recheck address that you submit in everything when you want to do that activity.

Thank you for bringing this into my notice, I have been very careful with my laptop while browsing I hardly click or download any software online or click on any ads based on some the stories I heard as regards hackers using malware to steal information and other sensitive documents, Clipboard hacking has become the latest in vogue in cybercrime now I would now ensured I thoroughly check any address of wallet or the address of the recipient of bitcoin or ethereuem.

Clipboard malware viruses often occur and many infect cryptocurrency users' computer devices. Users who are not vigilant and do not check again when copying and pasting the address, it will fall into a trap. Spread malware will change the copy paste command with the voter's address. You must be careful and always check the address before you make a withdrawal or send assets to someone.

A while ago some clipboard is popping out when I press Shift or when I press control all my browser will shut down.
Is that it? I am using Mozilla at that time and it wont stop.
I have been googling at how it will be taken down but I cannot find answers.

Then suddenly, it just went off without doing anything. Is my computer infected now?
I didn't type anything on the clipboard.

different customs as hecker works on decision to gains with use of capture with data and information as appealing of attitude with the victims as their absence on field of work on online desktop to refuse of one with excessive on expends as might to collects with use on results as the chance of transmission of balance on account into dedicated ones with the work on administration.

yes that is, I had experienced it by myself four years ago. back then it infected my shift too, you need to wipe out your computer and install it again if you want to remove it.
be careful when copy-pasting the address because it will give you a wrong address.

Yeah, I heard about victims of such process, so guys please be aware. Always double and tripple check all details in your transaction, especially recipient address and the fees. It is very important and can save you time and money.

In my opinion this is not too dangerous, it's just that we have to be careful and observant to send to a different address, how to deal with it is also quite easy and does not need to reinstall your device, simply search for files on your operating system and fix it. if your computer has a virus like this please go here [1]. forum about malware, there discuss like the incident that the OP said.

Actually in this forum there has been discussion like this, but I forgot which thread is located. I tried to look for it and found none.

______
[1] https://forums.malwarebytes.com/topic/233573-copy-paste-problem-with-bitcoin-wallet-address/

That is why to avoid copying and do not repeating this activities as much as possible, especially when going to access the wallet, such as when accessing MEW using PK is not recommended because it is necessary to copy and paste it better to use Metamask. This article is good enough to avoid clipboard hacking clipboard hack problem beware of ctrlc (http://www.techiesguide.com/clipboard-hack-problem-beware-of-ctrlc.html)

Before sending funds to any address we have to cross check first five words and last five words with more than one time or each time when we are sending funds to any address.

And my question is how are hackers finding new tricks to stolen our crypto currencies. Is there any  best way to away from hackers ?  

I have always been paranoid that I might make a mistake when copy-pasting wallet addresses. This is why I always take time to check the last characters of the address just to be sure before clicking on send. Is there no way to scan devices and check for compromised clipboards?

This is highly helpful. I never thought the hackers in their scams will go this dimension. But thank God people are getting their methods day in day out.

Now that is scary.
I haven't done any transactions yet but there will be next week.

Is there no other way to fix this thing?
I mean, I do not see it anymore or should my computer really need a whole effort of format which for me takes a lot of time.
I really do not know why or how it suddenly pops out and I have this trust with Mozilla about defenses with malwares like that.

you do not see it right now but it will definitely appear later on, the malware is active and inactive randomly. I do not know other methods other than this(I had tried to uninstall apps that I installed a few days before I got this, but nothing changed), and as far as I remember my numerics were also infected.
in my case I got this malware when I used huobi or blockchain.com, did you visit them?

I have seen this case before and if this virus grows again, all users should pay attention to the back of the wallet, most people do not re-check to send money even though this is a way that does not take much time, but if to withdraw funds from the exchange site we usually get email for confirmation and can match wallet address before clicking on the confirmation link so this is impossible for the virus to work, I suggest using Windows 10 and using antivirus to deal with cases like this again

Perhaps all of these hacking incidents was mostly due to human error and negligence as what previous posts mentioned.

But of course! I guess all of this incidents could have been very well avoided if we have adequate and updated defense systems installed on our machines like a good Antivirus or Anti-malware. "Prevention is better than cure!".  :)

I once lost my funds with the similar malware in my windows. That why I double check the initial and final texts of my address to be sure. I have also dumped windows for an alternative OS and my use my browser with very few extensions and zero addons. I also prefer scanning the QR code than typing in the address in case of sending from mobile wallets like coinbase and coinomi.

this generally comes from add-ons. can still be cleaned for a while, but be sure to update everything, including the browser.

the thing I'm worried about when Halving is that things like this are active again or even more deadly. make sure to activate three options (sim, 2fa, email) when making a withdrawal for a stronger step clause.

We have to be careful here, as it is difficult to notice especially when we are in a hurry and do not pay close attention to the detail of the wallet address that our bitcoins and altcoins are going to. So we have to be careful and cautious not to download unknown application as this may cause our pc to have virus and hacker to access our wallets.

This is the more reason why is good to do proper check and be sure before sending funds to any wallet address. Clipboard hacking as mentioned here will interchange the sender address and also aside that, your private keys can be leaked to the hacker when you copy it. Let's be careful with third party keyboards we download, some are developed by hackers.

If fraudsters have learned to access various systems of your computer and can steal any files, then I believe that it will not be difficult for them to steal information from your clipboard.  Coming out of this, I have no doubt in the existence of such malicious programs that enable the hacker to receive secret information from your computer.  To date, I am interested in one question, how safe are computers on the Android operating system?  I also met many times the information that hackers can easily access information on a computer, unlike a smartphone.  Based on this, I mostly use a smartphone for financial transactions, rather than a computer.

No, never went to those websites but just google and this forum on my Mozilla Firefox browser.
I am still trying to figure it out what else I opened.

I think the last one was also Yobit.net. But, I have been opening that since before and nothing seems to be going on.
It is just recently which something like this happened and my computer is not guarded by an antivirus.

If I try scanning it with an antivirus, will it be seen or should it be seen?

the work on hacker might goes as extents as the chance with appeals as measuring customs with reference of returns with the data encapsulation on qualifying the demographic value on captures to returns with something.

that I know hackers will try to do something that can get many people from the victims they hacked, some cases that have happened hackers can spread crime through viruses that spread quickly in the internet world, whereas at this time I am sure hackers are already planning to do something and it won't be the same as a case that has already passed.

There is nothing more important than to be careful about your data, especially in crypto industry. I always tripple check all transactions that I send, especially receiver address, because such kind of hacking is happening every day.

This happens most while using windows pc but on mobile phone its a different story entirely, there is no malware that can switch address to scammers address on smartphones but external keyboards can steal your recovery phrases

Thanks for sharing this have once heard about this though, so seeing it again means they are back. And just like you pointed out, the way out is double checking every details before confirming transcations. Some people are too busy to check those details, even when I receive confirmation email from exchanges I tend to cross-check the address to make sure I did the right thing. Taking few mins to cross check isn't bad..

It's been long I once heard this, thought it has been forgotten looks those fraudulent individuals are back again. I think this will only affect users who are always in a haste therefore not having time to check the payment details carefully. I spent time to do mine as issues about money should be taken with all seriousness.

I personally have a picture of what my wallet looks like in my memory. Aside that, I have my wallet saved in a safe and separate place, where I most time check again if I am on the right track. Clipboard hacker has being in existence for long, but not many people are aware of it, which is why information is very important. So, @OP, thanks for the info and the reminder.

Due to the more and more people become smart people and scammers feel more difficult to scam them all. Just to a simple re-check will be enough to make sure you are not infected with this kind of malware but again. what we must remember to never try to click anything on the internet if that is not yet proven as a reliable source.
Recently, the hackers have already started to spread malicious malware through use the youtube link.
Link is a very sensitive case that can be hijacked easily by scammer to spread the malware.

Also make sure to memorize part of the address when you copy it. The memorization will help you see if the address matches with what you paste on the cryptocurrency wallet. People should always check to see that the addresses they copy is correct till the transfer.

It is the reason why it is important to check the receiver address again, I don't think it is not possible if we are not installing any downloads from unknown websites so keep the crypto related devices from your daily internet surfing activities.

Hackers won't stop, they keep advancing in techniques. I was shocked when a friend lost his funds because he installed a 3rd party keyboard from plasytore. When just want to send out funds, I cross check the wallet address properly to be sure it's not replaced.

as far as I have experienced its still safe to use a mobile android for transactions and I am grateful that have never been hacked because the mobile system is now sophisticated with good anti-virus ,my advice is better not to visit an untrusted website on your computer If you do not want to be hit by malware

We need to be careful. Even if there is no clipboard hacking, you need to check the address again and again. I personally always check the first and last signs repeatedly and check whether there is any gap at the end or beginning.

I think that this action is performed by absolutely everything. But in most cases, those who click on the button “copy” do not mostly check wallets.Well, at least I'm not doing it.  

This is easy to avoid especially if you are not in a hurry with your transaction,

Usually the people who fall victim to it are those who are in a hurry and those who are confident in themselves that they are safe.

They are now targetting those who are using Youtube to install the malware just check this article https://cointelegraph.com/news/cyber-criminals-are-using-youtube-to-install-cryptojacking-malware, people should be aware of this and b every carefully if what you are installing is clean and coming from reputable websites.

In my opinion, everyone knows that scammers are moving further and further. You can’t keep up with them and you must do everything to protect yourself.

Yes, this is a known hack since few years ago but people never learned of the simple checking of wallet addresses that they are copying. I know that it could be due to the confidence that they have.

But checking will just consume few seconds of your life so that you can avoid this kind of hack. And to individual people here, you should be aware of what you are downloading. You may not know that you are already downloading a software with malware.

You can cheat this malware by copying half of address and paste it and then copying other half and paste it. However we all need to be extra cautious when we deal with money.

By the way, this is a common reason why many people are afraid of cryptocurrencies, they are afraid to switch to the Internet. Because paper money is in the hand. But the hand and eyes will not deceive, and hackers can deceive.

It's not copy but that should be after that person was pasting what he was copying to the clipboard. That works when someone is thinking if he has already copied the correct address and then paste it without did the double check to the address. that person is not careful with it.

windows 10 has no impact with this clipboard malware and using antivirus would be a good idea as long as it stays updated and you not doing any malicious stuff on the internet such as clicking random links and some .exe files from the internet. just double check everything before hit that send button it is not that hard for your own benefit

people are making such mistakes simply because they are lazy. they will continue to commit them until they send some large amount of money by themselves to the wrong address. only after that, they will begin to double-check the entered address. I always reread at least the last 6 digits of the address to which I send money.

But people are now switching to cashless payment method like apple pay and even gcash and it's just as complicated as cryptocurrency if you pay attention into the detail. paper money is now outdated and also not convenient enough to carry and you can nowaday did all your task of paying things through your phone which is why cashless society is a thing and it's not because people are afraid of anything digital including cryptos.

This is the most dangerous thing that can be, but I haven’t heard about such viruses since 2018, I thought that they were already exterminated, but if they still exist, it is undoubtedly very dangerous, when I found out about them I checked the first and last digits of the secret key and only then did the transfer. Thank you for reminding me, I will be careful again, because it’s so stupid to send a lot of money to someone else’s wallet.

This is just one of a variety of different hacks to watch out for. Phishers, RATs and data exfiltration tools are still common even in 2019.

For this reason, I opened practically every program in secure virtual machine before installing it. I also run suspicious programs through virus total and heuristic detection to ensure anything suspect is stopped right away.

Even though these attacks are easy to avoid, they tend to target noobs, so they'll be unlikely to even read the warnings.

Who the hell will just send the funds after pasting the wallet address without even seeing the first and last 3-s5 characters of the entire address?  They must be in a hurry, but that's not an excuse. It is better to be late than sorry.  I've read some of this clipboard hacking incidents, they were bugged after downloading a content through unsecured websites. I'd rather double, triple check it than to lost it.

Hackers always have ways to hack things and therefore our accuracy must be improved again and health in using the internet also needs to be considered because malware also comes from us carelessly doing activities on the internet, maybe one of the articles is included so that we learn more about hacking with this model.

Just because paper money is can be touched does not make it safer than crypto currencies any way. These sort of thoughts can be considered real with adults or people who do not understand bitcoin at all. People do get scam with the paper money too. Besides, robbery is a problem with all sort of assets. Pickpockets do not exist in cyber space and it is also a form of hacking as people get deceived out of carelessness.

This clipboard hacking is so old but surprising to see it re-surface back at today. My only advice for anyone is: no matter how sure you are, always check 3 letters at the end of the address. I remember bitcointalk veteran members back in the days even go as typing again some letters at the end of the address just to make sure.

Clipboard hacking has always been here. It's mostly targeted towards windows users while some are browser extension related. Best way to prevent them is to limit the number of apps and extension on you device and install only those which you absolutely need and install they through official website. Checking the address twice before pushing that button prevents yourself from getting scammed.

First five alphabet of wallet address and last five alphabet of your wallet address must be different from others, you need to checked very well before clicking on send button, honestly I hate using PC, too vunerable to attacks

all devices are considered vulnerable to hacking. even if you use an offline wallet but when you are not careful about accessing it, you can lose your money. the thing to remember is, focus and always be careful when accessing your wallet.