Description

The Clipboard Access feature in malware allows attackers to surreptitiously monitor and manipulate the clipboard content on a compromised system. Given that users often copy and paste sensitive information like passwords, financial details, or confidential text, this function serves as a valuable eavesdropping tool. The malware can either passively collect data from the clipboard or actively alter its content, depending on the attacker's objectives. For example, in the context of cryptocurrency, the malware could replace a copied wallet address with one belonging to the attacker, thereby redirecting funds. Clipboard Access not only enables an additional layer of data harvesting but also opens doors for more specialized kinds of attacks, offering a nuanced yet potent avenue for compromising system integrity and user security.

Existing Techniques

Name	Associated Feature(s)	Has Snippet	Matching Sample
Clipboard Content Reading	Clipboard Manager, Password Recovery		0
Clipboard Content Writing	Clipboard Manager		0
Clipboard Disabling	Clipboard Manager, Fun / Troll Functions		0

Associated with Releases

Version	Origins	Authors	Languages	Release Date
Lost Door 4.3.1	Tunisia 🇹🇳	OussamiO	Visual Basic 6 (VB6)	Apr, 2010
DarkComet RAT 2.0 RC7	France 🇫🇷	DarkCoderSc	Assembly, Delphi	Jun, 2010
Lost Door 5.1	Tunisia 🇹🇳	OussamiO	Visual Basic 6 (VB6)	Oct, 2010
Coolvibes 1 Update 8	Spain 🇪🇸	Thor	Delphi	May, 2011
Xtreme RAT 2.9	Brazil 🇧🇷	Raphael	Delphi	Jul, 2011
DarkComet RAT 5.3	France 🇫🇷	DarkCoderSc	Assembly, Delphi	Jun, 2012
DarkComet RAT 5.3.1	France 🇫🇷	DarkCoderSc	Assembly, Delphi	Jun, 2012
Lost Door 9.2 Aws	Tunisia 🇹🇳	OussamiO	Visual Basic 6 (VB6)	Jan, 2022