Quote
Simple modus operandi
The modus operandi of CryptoShuffler is very simple - It strikes when a user copies a Bitcoin address onto the clipboard, presumably to paste it in the destination address of his wallet and send across Bitcoins. Cryptoshuffler then replaces the address in the clipboard with an address owned by the malware creator. Unless a user notices that the address he has pasted is different, the funds will be transferred to the malware creator. Given Bitcoin transactions' irrevocable nature, the user has no way to retrieve his Bitcoins once the transaction is confirmed.
https://cointelegraph.com/news/cryptoshuffler-proves-bitcoin-owners-susceptible-to-malware-steals-150000?utm_campaign=crowdfire&utm_content=crowdfire&utm_medium=social&utm_source=twitter#2469446510-tw#1509607755152 The modus operandi of CryptoShuffler is very simple - It strikes when a user copies a Bitcoin address onto the clipboard, presumably to paste it in the destination address of his wallet and send across Bitcoins. Cryptoshuffler then replaces the address in the clipboard with an address owned by the malware creator. Unless a user notices that the address he has pasted is different, the funds will be transferred to the malware creator. Given Bitcoin transactions' irrevocable nature, the user has no way to retrieve his Bitcoins once the transaction is confirmed.