US DOJ and CrowdStrike Dismantle Sality Botnet After Two Decades

The U.S. Department of Justice and CrowdStrike have dismantled the Sality peer-to-peer botnet, which has been active since 2003. Over the past eight years, the botnet utilized EggJagger malware to hijack cryptocurrency payments by replacing wallet addresses in victims' clipboards. CrowdStrike estimates that the operators stole at least 12.1 million rubles, with unused stolen assets valued at approximately 1.35 million dollars as of January 2025. The operation involved authorities from the U.S., Bulgaria, Hungary, and Romania, who seized relevant domains. Cr