This is a sign that XMR is starting to take shape in terms of perception of value.



Once people are willing to scam for XMR and they go through the trouble to do so...it says XMR is valuable.



How valuable? The free-market will decide that.



It was probably an old BTC scam: Look for any BTC addresses in the content and replace them with your own. There was similar malware a while back that did the same thing using the copy-paste buffer on Windows.