thedefiant.ioarticleSlowMist Finds Data-Stealing and Address-Swapping Code in Udesk Scripts
The Defiant reports SlowMist's finding of data-stealing and address-swapping code in scripts served by Udesk. The payload can change both displayed and copied crypto deposit addresses. Its data collection reaches beyond the three site-specific targeting rules. The page text did not load past the standfirst, so IOCs, affected sites and timeline are not available.
TL;DR Reports SlowMist's discovery of malicious Udesk scripts that steal data and swap crypto deposit addresses, including copied ones.
Technologies named here
- Udesk scripts
- SlowMist
- Udesk
Techniques named here
- Address swapping
Threat actors named here
- Malicious code found in Udesk scripts
Related in Supply Chain
