Cyber attackers are using fake Microsoft Office extensions on SourceForge to embed malicious software that swaps the user’s crypto wallet address with the attacker’s, security firm Kaspersky has warned. The ClipBanker malware also sends information including IP addresses, country and usernames to the hackers via Telegram. Most of the potential victims detected are in Russia, although Kaspersky suggests the attackers could also sell access to other malicious actors.

Valley Man Who Sold Spying Malware, Pleads To Conspiracy
A man from Van Nuys has confessed to conspiring to sell malware, known as Hive RAT, that allowed buyers to illegally access computers, stealing personal