Description
The Clipboard Access feature in malware allows attackers to surreptitiously monitor and manipulate the clipboard content on a compromised system. Given that users often copy and paste sensitive information like passwords, financial details, or confidential text, this function serves as a valuable eavesdropping tool. The malware can either passively collect data from the clipboard or actively alter its content, depending on the attacker's objectives. For example, in the context of cryptocurrency, the malware could replace a copied wallet address with one belonging to the attacker, thereby redirecting funds. Clipboard Access not only enables an additional layer of data harvesting but also opens doors for more specialized kinds of attacks, offering a nuanced yet potent avenue for compromising system integrity and user security.
| Categories | Credentials, Exfiltration |
| Dangerousness | High |
Existing Techniques
| Name | Associated Feature(s) | Has Snippet | Matching Sample |
|---|---|---|---|
 Clipboard Content Reading
|
Clipboard Manager, Password Recovery | 0 | |
 Clipboard Content Writing
|
Clipboard Manager | 0 | |
 Clipboard Disabling
|
Clipboard Manager, Fun / Troll Functions | 0 |
Cerberus 1.02 Beta
Apocalypse RAT 1.4
Cerberus 1.03.4
Spy-Net 2.6
DarkComet RAT 1.3
Cerberus 1.03.5 Beta
DarkComet RAT 2.0 RC4
CyberGate 1.04.8
Lost Door 4.3.1
DarkComet RAT 2.0 RC7
Lost Door 5.1
DarkComet RAT 3.0
Coolvibes 1 Update 8
Xtreme RAT 2.9
DarkComet RAT 5.3
DarkComet RAT 5.3.1
Lost Door 9.2 Aws