# Cryptobandits · Drain Watch 1 incidents, 0 live. JSON: https://drains.watch/t/cryptobandits.json · RSS: https://drains.watch/t/cryptobandits/feed.xml - [Microsoft: USB-spread 'CryptoBandits' clipper swaps wallet addresses and steals seed phrases over Tor](https://drains.watch/i/cryptobandits-usb-worm-clipper-tor-jun-2026) (closed, High, Still active, since Jun 17, 2026)