Slowmist Identifies Credential Theft And Wallet Substitution In Udesk Scripts Arabian Post
The company disclosed its findings on 27 October after examining two JavaScript samples obtained during routine threat monitoring. Its investigation identified separate mechanisms for collecting sensitive browser data and manipulating payment destinations on three cryptocurrency trading websites.
SlowMist said the compromised file, named udeskApi.2026-10-16. cached. js, contained an additional loader concealed within otherwise functional customer-service code. The injected component fetched a second file, deeps. js, from a suspicious domain designed to resemble a legitimate Udesk address.
Legal Disclaimer:
MENAFN provides the
information “as is” without warranty of any kind. We do not accept
any responsibility or liability for the accuracy, content, images,
videos, licenses, completeness, legality, or reliability of the information
contained in this article. If you have any complaints or copyright
issues related to this article, kindly contact the provider above.
Comments
No comment