Sality Botnet Finally Taken Down After Years of Crypto Theft

A coordinated operation between the Department of Justice and CrowdStrike has finally put an end to the Sality botnet. This malicious network infected over 15,000 computers across four different countries to quietly siphon off digital assets. The takedown marks the end of an eight year run for one of the most persistent threats in the space.

Criminals used the botnet to hijack local machine resources, specifically targeting Bitcoin and Ethereum wallets. By manipulating transaction data on infected devices, the malware redirected funds to attacker wallets without users realizing their keys were compromised. The effort to isolate these infected machines provides a much needed win for individual wallet security.

While the infrastructure is now offline, the aftermath serves as a reminder to practice strict wallet hygiene. Security experts suggest that users who suspect their devices were part of the botnet should move their funds to new, clean hardware wallets immediately. Monitoring for further malicious activity in the broader network remains a priority for the coming weeks.