addrjack VS phishyserver

Real malware exists that can execute these sorts of attacks, or other attacks like clipboard hijacking. Attackers have also compromised weak passphrases on encrypted password managers, such as those exposed in the LastPass vault breach.

I have a pyperclip example in this program I wrote.

I created an educational demo called AddrJack in C# and Python, and made this tutorial video explaining the concept.

Those viruses definitely exist, and aren't particularly difficult to code up either. I made a C#.NET demo in about 30-45 minutes.

I actually wrote an educational demo showing this class of malware recently. It took me about 30 minutes in C#.NET using the Clipboaed library and regular expressions.

Source code for the curious

Source for the demo: https://github.com/chaintuts/addrjack

I wrote a small educational demo in Python. This tool demonstrates just how easy it is to scan for plain text seeds (in other words, seeds that aren't encrypted). My demo is a small library and UI for testing out and showing this concept, and can also be combined with code that would, for example, exfiltrate stolen seeds and store them in an attacker's database. Scanning for the seed is fairly simple - using regular expressions (a common programming tool) to search files on disk. Obviously, don't use the seeds shown in this demo as anyone could steal your coins.