Cybercriminals have orchestrated a sophisticated cryptocurrency heist by orchestrating an elaborate reputation-building campaign across multiple trusted platforms, demonstrating a worrisome evolution in social engineering tactics. This multi-faceted approach leverages the inherent trust users place in well-established technical resources to deliver a cross-platform clipboard hijacker that targets cryptocurrency transactions.
Attackers have systematically created a false sense of legitimacy by establishing fake profiles and repositories on GitHub, uploading misleading tutorial videos on YouTube, and submitting seemingly harmless samples to VirusTotal. By distributing their malicious tools across these platforms, they create an interconnected web of apparent credibility that tricks victims into downloading and executing what appears to be legitimate software or development tools. The clipboard hijacker specifically targets cryptocurrency users by silently replacing wallet addresses