EggJagger Clipboard Hijacking of Cryptocurrency Wallet Addresses

Arnold Chan@slaz

•updated 27 days ago•0•0•1

Detects anomalous clipboard activity where content is repeatedly replaced by cryptocurrency wallet address patterns (Bitcoin or Ethereum) within a short timeframe. This behavior is indicative of clipboard hijacking (clipjacking), a technique used by malware like EggJagger to substitute legitimate payment addresses with attacker-controlled addresses.