Again, even though I had prior knowledge about this, thanks for the heads up. Everyone should definitely resort to double checking addresses before sending/receiving funds.


Pretty sure it just copies the address provided by the malware host (creator) to clipboard instead of copying the actual address you highlighted and yes, it works based on some sort of detection algorithm i.e only when Bitcoin addresses are trying to be copied. It targets everything from web browsers to wallet clients using a formgrabber.

The best way to prevent it is to keep your machine clear. The trojan doesn't jump into your device out of nowhere. It is downloaded along with other software, inside a packed archive, a torrent executable, in a mail attachment. Get decent antivirus software, use official downloads for software, buy software instead of getting cracked versions from god knows where and avoid porn sites because they're full of trojans. I know it's hard, especially the last one, no pun intended, but at least use a different device from the one that's holding your money.