SlowMist finds address-swapping, data-stealing code in Udesk scripts
AI summary
Security firm SlowMist found malicious code in Udesk scripts that can steal data and swap crypto deposit addresses, changing both the addresses shown on screen and those copied by users. The data collection goes beyond three site-specific targeting rules, suggesting broad surveillance rather than a narrow exploit. Traders should treat any site loading Udesk scripts as a potential vector for deposit-address tampering, a direct theft risk for funds sent to swapped addresses.
