The malware has remained invisible to antivirus engines since first appearing a month ago and is particularly focused on crypto wallets.