U.S. DOJ says it dismantled the Sality botnet tied to $150,000 in stolen crypto

U.S. DOJ says it dismantled the Sality botnet tied to $150,000 in stolen crypto

N
News Editor
2026-09-03 23:00:04
The U.S. Department of Justice said it has dismantled the Sality botnet in a joint operation with authorities in Bulgaria, Hungary, and Romania, along with cybersecurity firm CrowdStrike. According to U.S. authorities, the botnet had infected about 15,000 devices since 2003 and was used over the past eight years to steal roughly $150,000 in cryptocurrency through a clipboard hijacking tool. CrowdStrike said the malware component, known as EggJagger, monitored wallet addresses copied to users’ clipboards and quietly swapped them with attacker-controlled addresses, allowing funds to be redirected. The firm also said the law enforcement action severed communication channels between the operators and infected devices. It added that the value of the related digital assets had at one point reached a peak of $1.5 million. The item was cited by Techub, which referenced Cointelegraph.

The U.S. Department of Justice, working with authorities in Bulgaria, Hungary, and Romania as well as CrowdStrike, said it had dismantled the Sality botnet.

U.S. authorities said the network had infected about 15,000 devices since 2003. Over the past eight years, it allegedly stole about $150,000 in cryptocurrency through a clipboard hijacking tool called EggJagger.

CrowdStrike said EggJagger monitored wallet addresses copied to a user’s clipboard and silently replaced them with addresses controlled by attackers, redirecting funds in the process. The company also said the law enforcement action cut off communication links between the criminals and infected devices. According to CrowdStrike, the related digital assets once reached a peak value of $1.5 million.

The report was referenced by Techub and attributed to Cointelegraph.

This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan.
700

Disclaimer:

The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.

Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.