Udesk Customer Service System Script Injected with Malicious Code, Potentially Stealing Data and Altering Recharge Addresses

The Udesk customer service system has been compromised by the injection of malicious code into its related scripts. Analyzed JavaScript samples can collect information from cookies, browser local storage, and session storage, as well as sensitive information from forms and authentication requests, potentially leading to the leakage of user sessions and account credentials. The malicious script can also replace the recharge addresses displayed on specific websites and alter clipboard content, which may result in recharge funds being redirected to addresses specified by the attackers. It is recommended that relevant websites stop loading the contaminated scripts and restore trusted versions, investigate data exfiltration records, revoke potentially leaked sessions, and change relevant credentials in a clean environment. Users should independently verify recharge addresses and transaction records through trusted channels.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.