as mentioned , I saw some articles talking about it.
I'm surprise that you are not aver of this!?
https://www.forbes.com/sites/daveywinder/2019/09/28/post-crash-bitcoin-warning-as-wallets-targeted-in-active-and-ongoing-hack-attack/#e9691173c14e
or
https://forums.juniper.net/t5/Threat-Research/Masad-Stealer-Exfiltrating-using-Telegram/ba-p/468559