Updated: A variant of the botnet targets rigs to covertly replace their wallet addresses.