BitPay issues Coinbitclip Trojan warning

Coinbitclip attacks a computer’s clipboard. For example, when Bitcoin users copy and paste a Bitcoin address, the Trojan Horse will change this copied address to one belonging to the assailant. In most cases, these two addresses look incredibly similar, and most people will not notice the difference until it is too late.

It is important to note this Trojan Horse has not infected any specific Bitcoin wallet or payment system at the time of writing, as it seems tailored towards affecting individual Windows users only. Similar to how most types of ransomware spread themselves, Coinbitclip has infected computers through email attachments or malicious software.

Coinbitclip has not gone by unnoticed, though, and Symantec has put together a list of actions users can take, and Symantec advises users to block incoming connections to services that should not be publicly available. Moreover, computers used by multiple members of the household may need to have privileges revised to ensure only basic tasks can be completed.

Bitcoin users need to be aware of the Bitcoin addresses they send money to. Manually going through an entire string of letters and digits may sound annoying, but losing money is even worse. Take the necessary precautions to make sure funds end up where they belong.

Removing the Coinbitclip Trojan Horse is not all that difficult, although there does not seem to be a cookie-cutter solution either. Norton Power Eraser has a chance of success, although it does not always remove the infection. Some users might be obligated to restore a backup of their system, or completely wipe the computer with a fresh Windows installation.