From what I have learned so far, there are viruses that can detect cryptocurrency wallet addresses and then when copied and pasted, they will automatically change the copied wallet address to the hacker's wallet address. The name of this virus is Masad Stealer Malware, or perhaps there are other types of malware that have not been named but have the same mechanism.
Usually, to clean this type of virus, antivirus alone is not enough, but you have to do a complete clean. Several years ago my PC was attacked by this virus and what I know is that the hacker address does not always appear when I press CTRL + V, but more often the hacker address appears when pressing the CTRL + V button when copying my address.
I realized this when I double-checked the last few letters for the address I was going to with the one I pasted. And strangely, when it was removed using the Windows Defender antivirus, this malware returned to activity some time later after the PC was restarted.