Udesk customer service system scripts have been injected with malicious code that can steal data and tamper with recharge addresses.

SlowMist has disclosed that Udesk's customer service system scripts have been compromised by malicious code. This JavaScript sample can collect sensitive information from cookies, browser local and session storage, forms, and authentication requests, and can replace payment addresses and tamper with clipboard content. SlowMist recommends that relevant websites stop loading the compromised script and revert to trusted versions, check for data leakage records, cancel potentially leaked sessions, and replace relevant credentials in a clean environment. Users should independently verify payment addresses and transaction records through trusted channels.