Microsoft discovers new lightweight backdoor that steals cryptocurrency
2026-06-21T08:51:49Z•c8bbc38bcf213054dd1b8e5e79ff422ac41073f663f48669728db807cefe9682
2FA bypassAI‑securityLLM vulnerabilitiesTSMETorUSB infectionbackdoorbotnetcredential‑theftcritical‑vulnerabilitycrypto‑theftdata‑exfiltrationhardware‑securitykernel‑exploitmalwarenpmpeopleSoftsecure‑bootside‑channelsoftware‑supply‑chainsupply‑chainuse‑after‑freewormzero‑day
What happened
June 2026 Arstechnica security roundup: Multiple high-impact incidents and vulnerabilities across malware, supply chain, AI, and hardware. Microsoft spotted a new self‑propagating “crypto clipper” backdoor that spreads via USB and communicates over Tor to steal cryptocurrency. A critical PeopleSoft 0‑day is being exploited to exfiltrate gigabytes from hundreds of organizations. A massive breach leaked credentials for thousands of sensitive networks (including Oracle, Lenovo, FedEx, a NATO contractor, and Fortinet). A critical Copilot/LLM flaw (SearchLeak) allowed theft of 2FA codes. The open‑s
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- arstechnica_security
- Record identifier
- c8bbc38bcf213054dd1b8e5e79ff422ac41073f663f48669728db807cefe9682
- Enrichment time
- 2026-06-21T08:51:49Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.