6.8 Security CrowdStrike联合执法部门摧毁Sality僵尸网络，终结八年来针对加密货币用户的盗窃活动。
CrowdStrike联合美国联邦机构及欧洲执法部门，成功发起跨国行动，摧毁了自2003年以来活跃的Sality僵尸网络。过去八年，Sality通过部署名为EggJagger的剪贴板劫持器，专门针对加密货币用户，将复制的比特币和以太坊钱包地址替换为攻击者控制的地址，盗取至少1210万卢布（约15万美元）。截至2025年初，未被动用的被盗资产峰值高达135万美元。 该僵尸网络通过点对点通信、局域网共享和USB驱动器传播，无需中央服务器。CrowdStrike利用Sality节点身份验证的漏洞，在协议层面断开了超过1.5万台受感染设备。 此次行动标志着对加密货币用户长期威胁的终结，有效瓦解了造成重大经济损失的网络。
Crypto: The Sality network falls after eight years of Bitcoin and Ethereum thefts
Crypto: The Sality Network Falls After Eight Years of Bitcoin and Ethereum Thefts
Crypto: The Sality network falls after eight years of Bitcoin and Ethereum thefts
CrowdStrike and the DOJ Take Down the Sality Botnet in a Major Blow Against Cryptocurrencies
CrowdStrike joins U.S. law enforcement to dismantle Russian Sality crypto theft botnet
Sality Botnet Dismantled After 23 Yrs of Silently Swapping Bitcoin & Ethereum Wallet Addresses
CrowdStrike and federal authorities dismantle Russian malware targeting crypto for 8 years
Justice Department and CrowdStrike dismantle Sality botnet after $1.35 million crypto theft
Sality Botnet Dismantled After Eight Years of Stealing Bitcoin and Ethereum
