SlowMist finds Udesk chat script that swaps deposit addresses on three trading sites

SlowMist reported that hidden code embedded in a Udesk chat script harvested login data on any page that loaded it and rewrote crypto deposit addresses on three trading sites. The attack targets users at the point of deposit, so funds could be redirected to attacker-controlled wallets without the victim noticing. Traders should verify deposit addresses out of band and treat chat-widget scripts on exchange sites as a live supply-chain risk.