Crypto Clipboard Hijacker Hides Behind Fake Stars and Upvotes

Check Point Research uncovered a cross-platform Rust clipboard-hijacker campaign that swaps cryptocurrency wallet addresses to steal funds; the operator promotes builds via a WordPress phishing hub, GitHub/SourceForge, YouTube tutorials and forum posts, leverages fake reviews and inflated metrics (“Ghost Networks”) to appear trustworthy, and implements self-healing persistence on Windows and macOS while shipping large embedded wallet lists and rotating attacker-controlled addresses after theft.