The attackers now opt for more 'sophisticated' malware to target crypto investors via trading or airdrop groups on Telegram.