Cybersecurity researchers have uncovered a sophisticated global malware campaign that steals cryptocurrency by secretly swapping wallet addresses during transactions.