CryptoBandits is a Windows-based cryptocurrency clipper malware campaign disclosed by Microsoft in June 2026. It uses USB LNK files for propagation and Tor-based command-and-control to steal cryptocurrency wallet information, including seed phrases and private keys.