Clipboard Hijacking
Clipboard hijacking is a malware attack that monitors the clipboard and swaps a user's copied cryptocurrency wallet address with the attacker's address, diverting funds.
What Is a Clipboard Hijacking?
A Clipboard Hijacking is a malware attack that monitors a user's device clipboard. Attackers swap copied cryptocurrency wallet addresses with their own. Victims paste the altered address and send funds to the wrong recipient.
Malware runs silently in the background. It scans clipboard data for patterns like Bitcoin addresses starting with '1', '3', or 'bc1'. Ethereum addresses begin with '0x'. Detection triggers instant replacement with the attacker's address. Users rarely notice the switch.
This attack matters in crypto because transactions are irreversible. Funds vanish permanently once confirmed on the blockchain. It exploits the habit of copying long addresses from exchanges or wallets. Scammers steal millions annually via this method.
Key traits include stealth—no visible alerts—and targeting crypto users. Synonyms are clipboard malware and address replacement. Prevent it by verifying pasted addresses match originals, scanning QR codes, or using hardware wallets that sign transactions offline.
- Run antivirus software.
- Avoid suspicious downloads.
- Copy addresses in air-gapped environments.
In cryptocurrency, a swap is the direct exchange of one token for another on a blockchain, often via decentralized exchanges (DEXs) without intermediaries.
Read full definitionA crypto wallet stores private keys for cryptocurrencies. It lets users send, receive, and manage digital assets on the blockchain.
Read full definitionBitcoin (BTC) is the first decentralized cryptocurrency, launched in 2009. It uses blockchain technology for secure, peer-to-peer digital transactions without intermediaries.
Read full definitionEthereum is a decentralized blockchain platform that enables smart contracts and decentralized applications (dApps). Its native cryptocurrency is Ether (ETH).
Read full definitionCryptocurrency is a digital or virtual currency secured by cryptography, operating on decentralized blockchain networks to enable secure, peer-to-peer transactions.
Read full definitionReal-World Examples
Example 1: Alice copies a Bitcoin address 'bc1qxy2kgdygjrsqtzq2n0yrf2493p83kkfjhx0wlh' from her exchange app. Clipboard hijacking malware detects the pattern and swaps it with the attacker's address 'bc1qmaliciousattackeraddresshere'. She pastes the fake address into her wallet and sends 1 BTC. Funds go to the scammer.
Example 2: Bob downloads a fake crypto trading app infected with clipboard malware. He copies an Ethereum address '0x742d35Cc6634C0532925a3b8D7cC45924F2D5C6b' to receive ETH from a friend. The malware replaces it instantly. Bob shares the altered address, and his friend sends funds to the attacker.
Example 3: During a market surge, Charlie copies multiple withdrawal addresses from his hardware wallet display. Background malware scans each one, replacing valid Monero addresses starting with '4' with the hijacker's. Charlie verifies one but misses others, losing $5,000 across transactions.
Example 4: A user pastes a copied Solana address '9WzDX...example' into a dApp. Clipboard hijacker swaps it before pasting. The transaction confirms on-chain, sending SOL to the wrong wallet irreversibly.
Bitcoin (BTC) is the first decentralized cryptocurrency, launched in 2009. It uses blockchain technology for secure, peer-to-peer digital transactions without intermediaries.
Read full definitionIn cryptocurrency, a swap is the direct exchange of one token for another on a blockchain, often via decentralized exchanges (DEXs) without intermediaries.
Read full definitionCryptocurrency is a digital or virtual currency secured by cryptography, operating on decentralized blockchain networks to enable secure, peer-to-peer transactions.
Read full definitionEthereum is a decentralized blockchain platform that enables smart contracts and decentralized applications (dApps). Its native cryptocurrency is Ether (ETH).
Read full definitionMonero (XMR) is a privacy-focused cryptocurrency that uses ring signatures, stealth addresses, and RingCT to obscure sender, receiver, and transaction amounts on the blockchain.
Read full definitionSolana is a high-performance layer-1 blockchain platform that enables fast, low-cost transactions using Proof of History and Proof of Stake. Its native token is SOL.
Read full definitionReady to Choose a Secure Wallet?
Use our tools to find the right hardware wallet for your needs.