Silently operating in the background, this stealing malware can directly take cryptocurrency from wallets and replace legit crypto addresses.