PANews|Oct 27, 2026 11:03
[Security Agency: Udesk Customer Service System Scripts Injected with Malicious Code, Capable of Stealing Data and Replacing Recharge Addresses] According to SlowMist, its threat intelligence investigation revealed that scripts related to the Udesk customer service system have been injected with malicious code. The analyzed JavaScript sample can collect sensitive information from cookies, browser local storage, session storage, and forms and authentication requests, potentially leading to the leakage of user sessions and account credentials. The malicious script also replaces the recharge address displayed on specific websites and tamperes with clipboard content, potentially causing recharge funds to be transferred to addresses specified by the attacker. SlowMist recommends that relevant websites stop loading the infected script and revert to trusted versions, check for data leakage records, cancel potentially leaked sessions, and replace relevant credentials in a clean environment; users should independently verify recharge addresses and transaction records through trusted channels.
Share To
HotFlash
APP
X
Telegram
CopyLink