This is not the first time this has come up. In fact I wrote an article a while back on how to use this for something legitimate [1] (including mobile support).

This is not the first time this has come up. In fact I wrote an article a while back on how to use this for something legitimate [1] (including mobile support). It is far easier to execute on the desktop (by watching for the control key press, then creating a hidden div that contains the text to be copied + malicious code if necessary). [1] https://sonalkeshav.me/2015/08/30/html5-clipboard-api/ https://sonalkeshav.me/2015/08/30/html5-clipboard-api/