Hackers have embedded malware in fake Microsoft Office add-in packages on SourceForge. Dubbed ClipBanker, it sneakily swaps cryptocurrency wallet addresses in users' clipboards, diverting funds to hackers. Kaspersky reports most victims are in Russia, and this scheme includes data theft via Telegram. To avoid falling victim, always download software from reliable sources. This is a devious playground for hackers, highlighting the risks of deviating from trusted software paths.