SlowMist Finds Data-Stealing and Address-Swapping Code in Udesk Scripts
2 outlets · first seen 22h ago · latest 17h ago
-
The Defiantfirst seen
SlowMist Finds Data-Stealing and Address-Swapping Code in Udesk Scripts
The payload can alter both displayed and copied crypto deposit addresses, while its data collection extends beyond three site-specific targeting rules.…
-
Unchained
Hidden Code in Udesk Chat Script Swaps Crypto Deposit Addresses, SlowMist Says
JavaScript tied to Udesk, a customer service chat widget that websites embed on their pages, carried code that collected visitors’ login data and replaced crypto deposit addresses on at least three trading sites, according to blockchain security firm SlowMist. SlowMist published its analysis on Tuesday after its team spotted the code during routine threat intelligence work. The firm said its…