Various security researchers have identified new instances of hackers targeting other hackers via clipboard stealers on underground forums. The observed clipboard stealers, which are used to monitor a target’s clipboard content in order to identify and replace cryptocurrency wallet addresses, were disguised as legitimate cracked remote access trojans (RATs) as well as malware building tools. Cyble researchers, in their report linked below, specifically noted the sighting of a new malware dubbed “AvD cryto stealer” that is actually a disguised variant of a well-known Clipper malware. The researchers detailed that the threat actor behind AvD crypto stealer is providing “one month of free access to entice more individuals to use it” and that “the primary target appears to be other TAs”. ASEC researchers, in their report linked below, detailed the distribution of “ClipBanker”, a malware that monitors infected systems’ clipboards, being disguised as a malware building tools such as “Quasar RAT”. It is not unusual for hackers to scam other hackers, but these described instances specifically prey on inexperienced actors who welcome free malware without a second thought. Cyble and ASEC provided in-depth reports regarding their observations as well as indicators of compromise (IOCs) to review.