CrowdStrike

U.S. Departme

2026-09-03 23:00:04

U.S. DOJ says it dismantled the Sality botnet tied to $150,000 in stolen crypto

The U.S. Department of Justice said it has dismantled the Sality botnet in a joint operation with authorities in Bulgaria, Hungary, and Romania, along with cybersecurity firm CrowdStrike. According to U.S. authorities, the botnet had infected about 15,000 devices since 2003 and was used over the past eight years to steal roughly $150,000 in cryptocurrency through a clipboard hijacking tool. CrowdStrike said the malware component, known as EggJagger, monitored wallet addresses copied to users’ clipboards and quietly swapped them with attacker-controlled addresses, allowing funds to be redirected. The firm also said the law enforcement action severed communication channels between the operators and infected devices. It added that the value of the related digital assets had at one point reached a peak of $1.5 million. The item was cited by Techub, which referenced Cointelegraph.

520

US Department

2026-09-02 21:27:15

US Justice Department and CrowdStrike move against Sality malware tied to crypto theft

US federal authorities, working with cybersecurity firm CrowdStrike and international partners, said they disrupted the Sality botnet and related malware linked to cryptocurrency theft and other cyberattacks. The Justice Department said the effort involved officials in Bulgaria, Hungary and Romania, along with private-sector partners CrowdStrike and the Shadowserver Foundation. According to CrowdStrike, operators behind Sality used EggJagger over the past eight years, a clipjacking tool that monitored copied wallet addresses and silently replaced them with addresses under the attackers’ control. The company said the campaign stole at least 12.1 million rubles, or about $150,000, in cryptocurrency. It also said the value of the digital assets that were never spent reached about $1.5 million in January 2025. Authorities and CrowdStrike added that the disruption caused the operators to lose the ability to communicate with infected machines. Roughly 15,000 compromised computers were part of a peer-to-peer botnet that checked whether its systems were online every 40 minutes.

510

CrowdStrike

2026-09-03 02:58:44

CrowdStrike and Nvidia unveil SafeMind to counter automated AI cyberattacks

CrowdStrike and Nvidia announced a strategic partnership at this year’s Fal.Con conference, rolling out SafeMind, an AI-driven defense system designed to respond to increasingly automated cyberattacks. The project combines CrowdStrike’s 15 years of threat intelligence with NVIDIA’s open-source Nemotron models and uses CoreWeave’s AI cloud infrastructure for model training and inference. According to the companies’ outline, SafeMind is built as a proactive security framework in which different Nemotron models handle separate tasks, including orchestration and rule generation. The system is also tested in a digital twin environment jointly built by Nvidia and CrowdStrike, where red-team and blue-team agents continuously compete in simulated attack-and-defense scenarios. Alongside SafeMind, the two companies also introduced Falcon IQ, a multi-agent automation platform running in a no-code agent development environment. Powered by Nemotron models, Falcon IQ can coordinate more than 50 AI agents and is aimed at automating security assessments, threat prioritization, and remediation tasks for enterprise security teams.

1520

CrowdStrike

2026-09-02 13:14:47

CrowdStrike, Law Enforcement Dismantle Russian Malware That Stole Crypto for 8 Years

CrowdStrike and federal law enforcement agencies have dismantled the Sality malware, a Russia-based operation that secretly stole cryptocurrency for eight years. The malware monitored users copying Bitcoin or Ethereum addresses and replaced them with the attacker's addresses. Over 15,000 infected machines were isolated as part of the takedown.

1050

Sality botnet

2026-09-02 11:41:33

Global Takedown of Sality Botnet Isolates Over 15,000 Devices

CrowdStrike and the U.S. DOJ announced the dismantling of the Sality peer-to-peer botnet, isolating over 15,000 devices globally. The botnet, active since 2003, used the EggJagger clipboard hijacker to steal at least $150,000 in Bitcoin and Ethereum. The operation involved U.S. and European law enforcement agencies seizing domains and infrastructure. Infected devices are now redirected to CrowdStrike-controlled servers, but the malware remains active until manual removal.

1090

Sality botnet

2026-09-02 11:39:43

CrowdStrike and US Justice Department Dismantle Sality Botnet That Hijacked Crypto Payments

CrowdStrike, in coordination with the U.S. Justice Department, announced Tuesday the takedown of the Sality peer-to-peer botnet, which had been active since 2003. Over the past eight years, it used the EggJagger malware to hijack cryptocurrency payments, stealing at least 12.1 million rubles (approximately $150,000). Unspent stolen crypto was valued at around 147 million rubles (roughly $1.35 million) at its peak in January 2025. The operation involved authorities from the U.S., Bulgaria, Hungary, and Romania. CrowdStrike isolated over 15,000 infected machines into honeypots. The operator, tracked as SALTY SPIDER, previously launched a DDoS attack on Russian exchange AvanChange in September 2023.

1100

Sality

2026-09-02 11:32:37

Sality botnet dismantled after years of hijacking Bitcoin and Ethereum payments

CrowdStrike and the U.S. Department of Justice said they have disrupted Sality, a botnet that has been circulating since 2003 and spent the past eight years stealing cryptocurrency payments by swapping wallet addresses on infected computers. According to CrowdStrike, Sality mainly served as a delivery system for other malware, with EggJagger becoming its primary payload during that period. The security firm described EggJagger as a clipjacking tool that watches the clipboard for crypto wallet addresses and replaces them with addresses controlled by the operator, causing victims attempting to send Bitcoin or Ethereum to redirect funds to someone else instead. CrowdStrike estimated that EggJagger alone brought in at least 12.1 million rubles, or about $150,000. It also said most of the stolen coins were never spent, and that the untouched holdings reached a peak value of about 147 million rubles in January 2025, equal to a nominal $1.35 million. Authorities in the U.S., Bulgaria, Hungary, and Romania took part in the takedown, while CrowdStrike said it isolated more than 15,000 infected machines worldwide by redirecting them to sinkholes under its control.

1230

Binance

2026-09-02 08:33:01

Binance to List Four bStocks Tokenized Security Pairs: CrowdStrike, Moderna, SQQQ, Seagate

Binance will list four bStocks tokenized security trading pairs on September 2, 2026, at 20:00 UTC+8: CrowdStrike (CRWDB), Moderna (MRNAB), ProShares UltraPro Short QQQ (SQQQB), and Seagate (STXB). Spot algo trading bots go live simultaneously, with smart holdings bots enabled within 24 hours. Users can convert bStocks to BTC, USDT, or other tokens fee-free for the first hour. Zero maker fees on the four pairs until October 1, 2026, 07:59 UTC+8.

1170