SlowMist Finds Data-Stealing and Address-Swapping Code in Udesk Scripts

2 outlets · first seen 22h ago · latest 17h ago

  • The Defiantfirst seen

    SlowMist Finds Data-Stealing and Address-Swapping Code in Udesk Scripts

    The payload can alter both displayed and copied crypto deposit addresses, while its data collection extends beyond three site-specific targeting rules.…

  • Unchained

    Hidden Code in Udesk Chat Script Swaps Crypto Deposit Addresses, SlowMist Says

    JavaScript tied to Udesk, a customer service chat widget that websites embed on their pages, carried code that collected visitors’ login data and replaced crypto deposit addresses on at least three trading sites, according to blockchain security firm SlowMist. SlowMist published its analysis on Tuesday after its team spotted the code during routine threat intelligence work. The firm said its…