Clipboard Hijacking

Clipboard hijacking is a malware technique in which a program watches the system clipboard and silently swaps a copied cryptocurrency address for one the attacker controls. It preys on a habit almost everyone has, since addresses are long enough that people copy and paste rather than read them, and glance only at the first and last characters. Security researchers have tracked this family, often called clipper malware, across desktop and mobile platforms for years. The practical defence is to verify the full destination on a device the malware does not control, which is what a hardware wallet's own screen provides, and to send a small test amount first when moving to a new address.