Looks like they had a neat attack vector but their ultimate end goal didn’t have a wide enough net.

After stealing windows users clipboard contents: “the threat actor is trying to redirect all potential cryptocurrency transactions to their wallet address. At the time of writing this blog, seemingly no transactions were made for this wallet.”