NeutralTech
Russia-based Sality watched for copied bitcoin and Ethereum addresses and quietly replaced them with the attacker’s. CrowdStrike and law enforcement have now isolated more than 15,000 infected machines.
The full article text is not available in MoonHub yet. You can read it at the original source.