Hidden Code in Udesk Chat Script Swaps Crypto Deposit Addresses, SlowMist Says
By Unchained
AI summary of the source article
Blockchain security firm SlowMist reported that JavaScript tied to the Udesk customer service chat widget contained code designed to harvest login credentials and alter crypto deposit addresses on at least three trading platforms.
Why it matters
SlowMist said attackers could use it to impersonate users or take over accounts.
Key facts
- A tampered Udesk script gathered user login data, cookies, and form inputs, sending the data to an external server.
- On deposit pages for MGBX, Biking Exchange, and BitxEX, the script swapped displayed deposit addresses with six substitute wallets across multiple blockchains.
- SlowMist advised affected businesses to stop distributing the scripts, close compromised pages, and rotate passwords and tokens.
Source excerpt · Unchained
The payload grabbed login data on any page that loaded it and rewrote deposit addresses on three trading sites, the security firm said. The post Hidden Code in Udesk Chat Script Swaps Crypto Deposit Addresses, SlowMist Says appeared first on Unchained .