Skip to content
ClipXDaemon Malware Targets Cryptocurrency Users on Linux

ClipXDaemon Malware Targets Cryptocurrency Users on Linux

First seen 9 Mar 2026, 10:38 UTC

Article Content

Browse articles
ThreatCluster AI
ThreatCluster March 12, 2026 at 16:10 UTC

Security researchers have identified ClipXDaemon, a new malware strain targeting cryptocurrency users on Linux systems. This stealthy clipboard hijacker manipulates copied wallet addresses and is delivered through a loader structure linked to previous ShadowHS activity, although no direct connection between the two has been established.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 183d ago How this analysis works

Timeline

2026-03-09
ClipXDaemon malware identified targeting crypto users
2026-03-09
Research published by Cyble’s Research & Intelligence Labs

More articles in this cluster (4)

Following this threat?

Track ClipXDaemon in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed