Security· ★★★· bearish·

SlowMist finds data-stealing, address-swapping code in Udesk scripts

  • —Payload alters deposit addresses on display and when copied
  • —Data collection exceeds three site-specific targeting rules
  • —SlowMist flagged the code in Udesk support scripts
Why it matters: Address swapping at copy time defeats visual checks and puts user funds at risk on sites running Udesk.
Source: The Defiant
More on this
Security · Oct 24
SlowMist warns of DarkSword trojan stealing crypto from iPhones
 Security · Oct 23
SlowMist flags fake Solidity GitHub repo hiding wallet-stealing backdoor
 Security · Oct 10
SlowMist: Ledger device found with spy implant stealing seed phrases via screen