CoinDesk · 2026-09-02T13:14:47.000Z
Russia-based Sality watched for copied bitcoin and Ethereum addresses and quietly replaced them with the attacker’s. CrowdStrike and law enforcement have now isolated more than 15,000 infected machines.
Source: CoinDesk · · fact-reporting