CrowdStrike and Federal Agencies Dismantle Long-Running Russian Crypto-Stealing Malware

Cybersecurity firm CrowdStrike, in collaboration with federal law enforcement, has dismantled the Sality botnet, a Russian-linked malware operation active since 2003. Over the past eight years, the malware's core payload, EggJagger, hijacked clipboards to replace Bitcoin and Ethereum addresses with attacker-controlled ones. By exploiting a flaw in the botnet's peer-to-peer communication, CrowdStrike disconnected over 15,000 infected devices. The operation, which targeted assets worth approximately $1.35 million by early 2025, highlights the importance of ve