SlowMist Flags Data Theft and Crypto Address Swaps in Udesk Scripts
Edited by Steinar Vigdel Kolnes, Editor, Oslo
SlowMist identified code in Udesk scripts that can replace crypto deposit addresses and collect data beyond three site-specific targeting rules.
SlowMist has identified data-stealing and address-replacement code in Udesk scripts, according to a report from The Defiant.
The payload can change cryptocurrency deposit addresses shown on a page as well as those copied by a user. This could cause a copied address to differ from the intended deposit destination.
The report also indicates that the code's data collection reaches beyond three site-specific targeting rules. The supplied summary does not identify the affected sites or specify what data is collected.
Source: The Defiant