“Cryptocurrency is not a far-off technology anymore. Lately, we have observed an increase in malware attacks targeting different types of cryptocurrencies and we expect this trend to continue,” Sergey Yunakovsky, a malware analyst at Kaspersky Lab, said in a statement.

The new virus, named CryptoShuffler, activates itself when a targeted user attempts to transfer money from one wallet to another. The procedure requires the recipient’s wallet ID, which commonly consists of a long set of symbols and is impossible to memorize, making a user apply a copy-paste option.

Kaspersky to share threat intelligence with Interpol in ‘fight against cybercrime’ — RT World News
Kaspersky Lab signed a threat intelligence sharing deal with Interpol on Thursday, as the Russian cybersecurity firm continues its fight against US claims of being involved in spying activities.

The process involves copying wallets' numbers and pasting them into the “destination address” line of the software that is used to carry out a transaction. At that stage, CryptoShuffler starts to monitor the device's clipboard, utilized by a victim when making a payment.

The virus replaces the wallet with one owned by the creator, which means that a user pastes the wallet ID, not in the address they originally intended to send money to. As a result, a user transfers his or her money directly to cybercriminals, unless the user spots the sudden replacement.