Torg Grabber is a newly identified infostealer actively targeting cryptocurrency wallet browser extensions, password managers, and 2FA tools across all major browsers. Delivered via ClickFix, a clipboard-hijacking technique requiring no file download or user-executed exploit, it bypasses Chrome’s App-Bound Encryption and has produced 334 unique samples in roughly 60 days, indicating rapid iteration under a likely malware-as-a-service model. Organizations face credential theft risk wherever employees use personal browser profiles or store credentials in browser-based password managers, with particular exposure for any staff holding or transacting cryptocurrency assets.