🛡️ CryptoClipGuard

CryptoClipGuard is a real-time clipboard hijack detector and shield for Windows. It protects cryptocurrency users by monitoring clipboard changes and preventing malicious software from replacing your copied crypto addresses.

🤔 What is Clipboard Hijacking?

Clipboard hijacking is a type of malware attack. When you copy a cryptocurrency address to send funds, the malware secretly replaces your address in the clipboard with the hacker's address. When you paste it, you end up sending your funds to the attacker!

🛡️ How this tool protects you

CryptoClipGuard silently runs in the background. If you copy a crypto address, it remembers it. If a background process suddenly changes that address to a different crypto address before you paste, CryptoClipGuard will:

1. Restore your original address immediately!
2. Show a Windows notification warning you about the attack.
3. Log the incident and try to identify the suspicious process.

✨ Features

• 🚀 Runs silently in the system tray.
• 🔍 Detects BTC, ETH, SOL, and USDT (TRC20) addresses.
• 🛑 Automatically blocks and reverts malicious clipboard replacements.
• 🔔 Desktop notifications on hijack detection.
• 📝 Detailed logging (clipguard.log).

📥 Installation

1. Clone or download this repository.
2. Install the required Python packages:
   root@kitploit:~

   pip install -r requirements.txt
   

3. Run the script:
   root@kitploit:~

   python cryptoclipguard.py
   

💻 Usage

Once running, you'll see a shield icon in your system tray (bottom right).

• Status: Shows if the guard is active.
• View Logs: Opens the log file to see past detections.
• Exit: Closes the application.

How it works (Technical Explanation)

CryptoClipGuard uses the win32clipboard library to listen for clipboard updates. It uses Regular Expressions (Regex) to detect if the text in the clipboard matches known cryptocurrency formats. If a match is found, it caches the address. If the clipboard changes from one crypto address to another (which is the signature of a clipper malware), it overwrites the clipboard back to the cached address and alerts the user using plyer.

🖼️ Screenshots

(coming soon !)

🤝 Contributing

Contributions, issues, and feature requests are welcome! Feel free to check the issues page.

📄 License

This project is licensed under the MIT License - see the LICENSE file for details.