Why You Shouldn’t Trust Your Clipboard [Practical]

[promise444c5]

-snip-

Again looking for a MAC Mini device tapia the goods really suit to get and if there is indeed a price it is very expensive compared to the initial price at launch because of the hype about using Mac Mini for Ai Agent.
And I'm going to try it and maybe get used to it, because before that I also used Linux although it wasn't long enough and ended up moving to windows again.
When it comes to viruses and malware, Mac OS is more secure but the real security depends on the user himself, not entirely on the device.

Almost missed this ..
Well.. I don’t know that much regarding minis but I heard they do great job just like the MacBook Pro for a discount price.  Try it but go for the silicon M2 and above..You don’t really need a killer machine if you’re not running that much heavy loads.

Don’t get rid of the second machine either, Mac OS have limitation and you can’t run other OS on it if you go for the  Silicon Chip.

[taufik123]

-snip-

The Mac Mini M4 that I am looking for has an M4 processor and it is the latest generation and indeed the price is getting more expensive and the items available are very limited in the market.
I use it for regular work and only a few lightweight editor applications.

And it seems that if I switch to Mac OS I also have to get used to it, and even though Mac OS looks very secure,
according to the title of this thread alone I won't have much faith in that security or with the Clipboard that I use,
because phishing and the like can be injected into some MacOS applications although it is very rare but it is not impossible that Malware can spread anywhere.

[Wiwo]

Sometimes ago, I was a victim of clipboard attack and I lost my bitcoin in the process.

Ever since then, whenever I want to make bitcoin transactions after copying and pasting the wallet in the desired area, I check and check again, if possible I check each character to confirm it align with my original wallet address.

My experience lose of my bitcoin thought me a very bug lesson 

[promise444c5]

The Mac Mini M4 that I am looking for has an M4 processor and it is the latest generation and indeed the price is getting more expensive and the items available are very limited in the market.
I use it for regular work and only a few lightweight editor applications.

Light weight doesn’t really need that much..

You can even use the M1 Pro but 16GB /32GB and above is much more better. That should serve you.. I don’t think Apple is going to move from  the current new processor version anytime soon and since you said light weight then you don’t really need the M4. But there’s absolutely no problem if you just want to go for anything newer.

On their official site, you may only see the newer versions only.. probably you can try some authorize resellers in your country if there’re any.

And it seems that if I switch to Mac OS I also have to get used to it, and even though Mac OS looks very secure,
according to the title of this thread alone I won't have much faith in that security or with the Clipboard that I use,
because phishing and the like can be injected into some MacOS applications although it is very rare but it is not impossible that Malware can spread anywhere.

Don’t trust, Always Verify…

[Somegory]

Sometimes ago, I was a victim of clipboard attack and I lost my bitcoin in the process.

Ever since then, whenever I want to make bitcoin transactions after copying and pasting the wallet in the desired area, I check and check again, if possible I check each character to confirm it align with my original wallet address.

My experience lose of my bitcoin thought me a very bug lesson 

The first time this happened to me was on a open source custom ROM that was said to be almost perfect, but it's not, somehow whenever I want to paste my address it change it to another.

The name of the OS is Lineage OS, I've read a thread on here that it's a good one, but unfortunately this copy paste problem started out of nowhere, I was unable to fix it.

I got a new phone and installed all the same apps on that old phone and I've never got similar copy pasting issue, avoid running a custom ROM on your android, they are not safe like people thought.

[Freeveto]

Sometimes ago, I was a victim of clipboard attack and I lost my bitcoin in the process.

Ever since then, whenever I want to make bitcoin transactions after copying and pasting the wallet in the desired area, I check and check again, if possible I check each character to confirm it align with my original wallet address.

My experience lose of my bitcoin thought me a very bug lesson 

Some of us don't bother checking the addresses when they just copied it, they always have that confidence that the address will remain unchanged since they are sure of it from the place they copied it from; while some will just check the prefix and the suffixes of the wallet address maybe just the last two letters that starts and end the wallet address, and this where some get it wrong.

The scammers that designed the malware has designed in such a way that the wallet they will paste for you will have the same prefix and suffix with your wallet address to deceive you, you have to doubled check the address and make sure it is the same before you send out the bitcoin.

[ImGenius]

Some of us don't bother checking the addresses when they just copied it, they always have that confidence that the address will remain unchanged since they are sure of it from the place they copied it from; while some will just check the prefix and the suffixes of the wallet address maybe just the last two letters that starts and end the wallet address, and this where some get it wrong.

The scammers that designed the malware has designed in such a way that the wallet they will paste for you will have the same prefix and suffix with your wallet address to deceive you, you have to doubled check the address and make sure it is the same before you send out the bitcoin.

Scammers build their malware in a way that it match almost with the original copied address because of that many crypto users loses high amount of money. Some advance scammers even make their malware to not replace when amount is low because they know some user will make small transactions to verify a address.. when someone done verification they won't check next time they paste that address which becomes easier for scammers to put a fake address..

[Rubuchi]

Sometimes ago, I was a victim of clipboard attack and I lost my bitcoin in the process.

Ever since then, whenever I want to make bitcoin transactions after copying and pasting the wallet in the desired area, I check and check again, if possible I check each character to confirm it align with my original wallet address.

My experience lose of my bitcoin thought me a very bug lesson 

im so sorry that you lost that money to a scammer . It is really sad that you experienced this situation of your money being stolen by the scammer and this goes to show us that these scammers have moved to a different level now and are more sophisticated with their ways of luring people into their ways now unlike before. I know that it is very important for us to also keep learning about how they operate and their new strategies to avoid being a victim of their attacks. I have learned something from the above reply, it is that we should keep acquiring more knowledge and understanding as it will save us from more troubles than we think we expect.

[L E G E N D A R Y]

Scammers build their malware in a way that it match almost with the original copied address because of that many crypto users loses high amount of money. Some advance scammers even make their malware to not replace when amount is low because they know some user will make small transactions to verify a address.. when someone done verification they won't check next time they paste that address which becomes easier for scammers to put a fake address..

Sometimes I wonder how they manage to just gain access to someone else’s device remotely and do whatever they want or manipulate someone into sending huge amounts of money to their addresses without even realizing it until the transaction is already completed, almost like they’re using some voodoo tricks to do it lol. But then I get to realize that technology is crazily advanced and is still advancing, the more reason people need to be careful because scammers are doing crazy things with technology lately.

[Ceemv22]

I’d like to know if there’s a clipboard malware that can identify the wallet address structure and use a wallet address almost identical to the copied address?

yea this is actually the part that i find most interesting, and imo it explain why the whole "check the middle too, not just the ends" advice isnt just paranoia 

the more advacned clippers dont just paste some random address, they swap in a pregenerated vanity address that matches the first and last few chars and thats exactly y only checking first/last 4 is risky those are the cheap parts to fake.

but theres a hard limit to how far they can take this. generating a vanity address that matches N chars gets exponentially more expensive per extra char. matching 4 is trivial, around 6-8 starts getting costly 

also one thing i havent seen mentioned here, BTC is a bit harder to atk this way than some altcoins because bech32 addresses have a checksum built in so a random swap usually just produces an invalid address that the wallet rejects. the attacker has to actualy burn compute generating valid vanity matches, while on chains with weaker address validation its way cheaper to make lookalikes

[Hazink]

Scammers build their malware in a way that it match almost with the original copied address because of that many crypto users loses high amount of money. Some advance scammers even make their malware to not replace when amount is low because they know some user will make small transactions to verify a address.. when someone done verification they won't check next time they paste that address which becomes easier for scammers to put a fake address..

The clipboard virus I know of only changes the address to the scammers' own immediately when you copy it and want to paste it, and the similarities between both wallets are what make it possible for them to succeed, because some of us are too lazy to carefully match our address before authorising payment, and I don't know about the malware that's only active base on the amount you are sending.

[Franklyn-wood]

Scammers build their malware in a way that it match almost with the original copied address because of that many crypto users loses high amount of money. Some advance scammers even make their malware to not replace when amount is low because they know some user will make small transactions to verify a address.. when someone done verification they won't check next time they paste that address which becomes easier for scammers to put a fake address..

Sometimes I wonder how they manage to just gain access to someone else’s device remotely and do whatever they want or manipulate someone into sending huge amounts of money to their addresses without even realizing it until the transaction is already completed, almost like they’re using some voodoo tricks to do it lol. But then I get to realize that technology is crazily advanced and is still advancing, the more reason people need to be careful because scammers are doing crazy things with technology lately.

Technology to is daily advancing as many people are using the opportunity to use it negatively on people with who are careless or feel less concerned about there own security whichakes it more easiy to access there privacy through develop softwares or links breaking through subtle methods like pop up messages that looks like ads. Corruption makes all this this things easier for scammers to loot money from account and escape with it because they have backs somewhere.

[Rubuchi]

Sometimes ago, I was a victim of clipboard attack and I lost my bitcoin in the process.

Ever since then, whenever I want to make bitcoin transactions after copying and pasting the wallet in the desired area, I check and check again, if possible I check each character to confirm it align with my original wallet address.

My experience lose of my bitcoin thought me a very bug lesson 

scammers will always look for a way to tkae what belongs to you and turn it to theirs. They don't even mind what you feel or go through afterwards, they are only more interested about their gains and no more. If you understand their mindset towards you, scammers have the same mindset as thieves so the responsibility of you taking very close eye to your activities and properties is very important and you should not joke with any sensitive information and details about you. Sometimes it is our negligence that causes the mistakes we make which brings us to our details being leaked and stolen.

[Hyphen(-)]

Scammers build their malware in a way that it match almost with the original copied address because of that many crypto users loses high amount of money. Some advance scammers even make their malware to not replace when amount is low because they know some user will make small transactions to verify a address.. when someone done verification they won't check next time they paste that address which becomes easier for scammers to put a fake address..

The clipboard virus I know of only changes the address to the scammers' own immediately when you copy it and want to paste it, and the similarities between both wallets are what make it possible for them to succeed, because some of us are too lazy to carefully match our address before authorising payment, and I don't know about the malware that's only active base on the amount you are sending.

Yes, the malware scams is an expensive scam that the scammers put in much effort to get a very similar wallet address that will replace your address immediately you copy the address, and if you are not careful to check well, you will end up sending to the wrong address because the addresses looks similar.

To avoid these, it is just to do everything manual; if you can’t write down the address manually, then make sure you double check your wallet address really well before you proceed sending so that you will be sure that it is the original wallet address; don’t be too lazy to check some part of the address, make sure you check alphabet by alphabet so that everything will be correct.

[Cookdata]

Scammers build their malware in a way that it match almost with the original copied address because of that many crypto users loses high amount of money. Some advance scammers even make their malware to not replace when amount is low because they know some user will make small transactions to verify a address.. when someone done verification they won't check next time they paste that address which becomes easier for scammers to put a fake address..

Sometimes I wonder how they manage to just gain access to someone else’s device remotely and do whatever they want or manipulate someone into sending huge amounts of money to their addresses without even realizing it until the transaction is already completed, almost like they’re using some voodoo tricks to do it lol. But then I get to realize that technology is crazily advanced and is still advancing, the more reason people need to be careful because scammers are doing crazy things with technology lately.

Malware doesn't work remotely, they are embedded on software to triggered on your PC. Like the one OP is talking about, the malware only affect your clipboard and the work is to replace a wallet address anytime it detect that the clipboard has copied something and I think this can be straightforward considering that we have just few address type, once it see that characters and see the length, it changes to the scammers address. If the victim didn't check the wallet and send, that's the end.

I have emphasize on download of software and crack versions, if you are into crypto you have no business with crack softwares, I don't know for other people but I don't use my main wallet pc for download, it's just basic apps and hot wallets that are there. The other laptop has Linux there, that's where I do my things knowing that I can used Linux and install apps through terminal without bulging into any malware. This doesn't mean Linux is free from malware, just that the chance of downloading one is rare.