SlowMist Discovers Malicious Code in Udesk Scripts That Steals Data and Swaps Addresses

WHY IT MATTERS

When you send cryptocurrency, you copy and paste a long wallet address — think of it like a bank account number. In this type of attack, malicious code secretly swaps that address with one belonging to a thief, so your money goes to the wrong place without you realizing it. What makes this case especially concerning is that the malicious code was found inside a customer service tool that many websites use. This is called a "supply chain attack" — instead of attacking you directly, hackers compromise a tool that many companies rely on, potentially affecting a large number of users at once. It is a reminder that security threats in crypto can come not just from fake websites or phishing emails, but also from trusted software that has been tampered with behind the scenes.