ClipXDaemon Targets Linux Users’ Cryptocurrency Wallets

ClipXDaemon is a Linux malware that targets cryptocurrency users in X11 desktop environments. It secretly monitors the clipboard and replaces copied wallet addresses with attacker addresses. The malware works without network communication and spreads through a multi stage infection process designed to avoid detection.

Pulse ID: 69af5ea87311ba61268d509d
Pulse Link: https://otx.alienvault.com/pulse/69af5ea87311ba61268d509d
Pulse Author: cryptocti
Created: 2026-03-09 23:58:32

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Clipboard #CyberSecurity #InfoSec #Linux #Malware #OTX #OpenThreatExchange #bot #cryptocurrency #cryptocti