Clipboard Data

Adversaries may collect data stored in the clipboard from users copying information within or between applications. For example, on Windows adversaries can access clipboard data by using <code>clip.exe</code> or <code>Get-Clipboard</code>.¹²³ Additionally, adversaries may monitor then replace users’ clipboard with their data (e.g., Transmitted Data Manipulation).⁴ macOS and Linux also have commands, such as <code>pbpaste</code>, to grab clipboard contents.⁵

1. MSDN Clipboard
2. clip_win_server
3. CISA_AA21_200B
4. mining_ruby_reversinglabs
5. Operating with EmPyre

使用该技术的组织

断言

尚无指向该技术的公开断言。

记录自动入库·未人工复核；置信度与有效期按引用读取。