http://hnw77fkkj63ke7odimquwmppx3qn3wgl2ooxiwag2rnlvwzwmzgsf2ad.onion/index.php/product/buy-bitcoin-stealer/index.html
It waits for the victim to copy a BTC address in clipboard in order to swap it to your address, and finally have him sending the $ to you instead. If the victim wants to make a $500 transaction to someone, then RAXNET will interfere with his address, and switch it to your address without him noticing.