CrowdStrike and Authorities Take Down Long-Running Russian Malware
- The malware, operated by Russia-based Sality, replaced bitcoin and Ethereum addresses with those of attackers.
- Over the course of eight years, the malware has infected more than 15,000 machines.
- CrowdStrike collaborated with law enforcement to isolate the infected systems.
- The operation highlights ongoing cybersecurity threats in the cryptocurrency sector.
This dismantling of malware is significant as it underscores the persistent risks posed by cybercriminals targeting cryptocurrency transactions. The replacement of wallet addresses could have led to substantial financial losses for users over time.
With over 15,000 infected machines identified, this operation marks a critical step in combating threats to crypto security.(Source)
