value:  Metamorfo has a function that can watch the contents of the system clipboard for valid bitcoin addresses which it then overwrites with the attacker's address.
name: Data Manipulation: Transmitted Data Manipulation