Article
Security firm: Malicious code was injected into scripts related to the Udesk customer service system, potentially stealing data and replacing deposit addresses
PANews October 27 reports that, according to SlowMist, its threat intelligence investigation found that scripts related to the Udesk customer service system had been injected with malicious code. The analyzed JavaScript samples can collect Cookie, browser local and session storage, as well as sensitive information in forms and authentication requests, potentially leading to the leakage of user sessions and account credentials. The malicious scripts can also replace deposit addresses displayed on specific websites and tamper with clipboard contents, potentially causing deposited funds to be sent to addresses designated by attackers. SlowMist recommends that relevant websites stop loading the contaminated scripts and restore trusted versions; investigate data exfiltration records, revoke potentially leaked sessions, and replace relevant credentials in a clean environment. Users should independently verify deposit addresses and transaction records through trusted channels.
Source: https://www.panewslab.com/zh/articles/01a17d07-4210-72d5-991d-29d5efceac98