So here is the gist of all the swap addresses extracted from malware. https://gist.github.com/jdstaerk/f845fbc1babad2b2c5af93916dd7e9fb

I've checked about 10 of the 'bc1' bitcoin ones and don't see any transactions.

I've also checked some of the eth ones on etherscan and don't see any meaningful activity on those....(a few .000015 transactions, that may be test from original malware developer, but nothing significant).

So what does this mean? A billion downloads and no transactions?