US Disrupts Crypto-Theft Malware Operation Spanning Multiple Countries

A long-running cybercrime operation tied to cryptocurrency theft has been disrupted by U.S. federal law enforcement, working alongside international partners and private-sector cybersecurity experts.

The Justice Department announced that the Sality malware and its botnet infrastructure were targeted in an effort spanning multiple countries, including Bulgaria, Hungary, and Romania.

CrowdStrike linked the scheme to clipjacking behavior that targets cryptocurrency wallet addresses copied to a clipboard, with at least 12.1 million rubles ($150,000) stolen over an eight-year period tied to 'never-spent' digital assets.