http://darkmaq7vctf64uzn3rxrmh6jy7hjc42cx2n5zb7njb5nmigab6insid.onion/btc_stealer_crypto_clipper.php
When a user copies a cryptocurrency address to the clipboard, the malware intercepts the copied address and replaces it with the attacker's address. As a result, when the user pastes the address into a transaction, the funds are unknowingly redirected to the attacker's wallet instead of the intended recipient. This form of attack primarily focuses on Bitcoin, the most widely recognized and valuable cryptocurrency.