Let’s set the scene.
You copy your bank account number, Bitcoin wallet address, or even a password, ready to paste it into a form. Easy, right?
Here’s where it gets risky:
That clipboard you trust can be hijacked.
Your clipboard is just a temporary storage space where copied text sits until you paste it. Hackers can slip malware onto your device that quietly watches it.
When it spots something valuable — like account numbers or wallet addresses — it swaps them for the hacker’s details.
So instead of sending money to your mate, you’ve just sent it straight to a scammer.
Why This Attack Works
• It’s invisible — you don’t see it happening.
• It works on simple copy-paste, something we all do every day.
• It targets valuable details: bank info, crypto, logins, emails.
Once the wrong data is pasted, it’s usually too late to undo it.
Real Example
In 2020, a clipboard hijacking trojan spread through fake downloads.
It waited silently until people copied crypto wallet addresses — then swapped them for the attacker’s.
Millions were stolen before victims even realised what was happening.
Do This Today
- Be careful where you download software
Stick to official app stores and trusted sites only. - Double-check pasted info
Especially for payments or wallet addresses. If it doesn’t match, stop immediately. - Clear your clipboard
Some devices let you clear it manually or automatically after a set time. - Use a password manager
These fill in logins securely without relying on copy-paste. - Keep antivirus/antimalware updated
Many tools can spot clipboard hijackers before they cause damage.
Key Takeaway
Copy-paste feels harmless, but your clipboard can be hijacked without you knowing.
Always double-check what you paste, and use tools that reduce the need for copying sensitive data in the first place.
At The Cyber Workshop, our Cyber Hygiene Workshop explains sneaky tricks like this in plain English and shows you how to shut the door on them. No jargon, just practical steps you can put into action today.
Till next time,
Think before you paste — your clipboard isn’t always your friend.