CrowdStrike and federal authorities dismantle Russian malware that secretly stole crypto for 8 years

Russia-based Sality watched for copied bitcoin and Ethereum addresses and quietly replaced them with the attacker’s. CrowdStrike and law enforcement have now isolated more than 15,000 infected machines.

Original reporting by CoinDesk · Shaurya Malwa. GridIndex is an aggregation and intelligence layer — full credit to the original publisher.