Rust-Based Crypto Clipboard Hijacker Uses Fake GitHub Stars and AI Videos for Distribution (infosecurity-magazine.com)

• Rust clipper replaces copied crypto addresses with attacker's
• Fake GitHub stars, downloads, and AI videos build trust
• Over 15,500 embedded wallet addresses; targets Windows and macOS

"Check Point Research identified a Rust-based crypto clipboard hijacker (clipper) that swaps copied wallet addresses for the attacker's. The campaign uses fabricated social proof: fake GitHub stars and forks, inflated SourceForge downloads, AI-narrated YouTube tutorials, and planted 'safe' votes on VirusTotal. It targets Windows and macOS users seeking crypto tools, with a loader that persists and monitors the clipboard for cryptocurrency addresses. Over 15,500 wallet addresses are embedded. The method represents a shift in attacker trust-building, potentially reusable for more damaging payloads like ransomware."