The malware, tracked as Trojan:Win32/CryptoBandits.A, spreads through .lnk files on USB drives, replaces wallet addresses for six cryptocurrencies, and uses a portable Tor client to hide its command-and-control traffic Microsoft Threat Intelligence has identified a new strain of self-propagating …