Redmond — A USB worm silently swaps crypto wallet addresses mid-transaction. The malware monitors the clipboard for wallet patterns, replaces them with attacker addresses, then exfiltrates seed phrase
Ars Technica