Fake GitHub Stars and AI Videos Mask a Crypto Clipper

Check Point Research uncovered a campaign spreading a Rust-based clipboard hijacker that swaps copied crypto wallet addresses with attacker-controlled addresses to steal funds. The actor manufactured trust through fake GitHub repositories, inflated SourceForge download counts, AI-narrated YouTube content, planted VirusTotal 'safe' votes and a WordPress phishing hub to distribute booby-trapped trader/gambler tools; the malware persists on Windows and macOS and embeds over 15,500 attacker wallet addresses.