Hackers hide crypto address-swapping malware in Microsoft Office add-in bundles

One of the malicious listings, called “officepackage,” has real Microsoft Office add-ins but hides a malware called ClipBanker that replaces a coped crypto wallet address on a computer's clipboard with the attacker's address, Kaspersky’s Anti-Malware Research Team said in an April 8 report. “Users of crypto wallets typically copy addresses instead of typing them. If the device is infected with ClipBanker, the victim’s money will end up somewhere entirely unexpected,” the team said source: https://cointelegraph.com/news/microsoft-office-extension-packages-hide-malware-replaces-crypto-addresses?utm_source=rss_feed&utm_medium=rss&utm_campaign=rss_partner_inbound