SlowMist Discovers Malicious Scripts Targeting Crypto Users on Udesk Platform
Blockchain security firm SlowMist has identified malicious scripts on Udesk's customer service system that steal login credentials and alter cryptocurrency deposit addresses.
Blockchain security firm SlowMist has identified malicious scripts on Udesk's customer service system that steal login credentials and alter cryptocurrency deposit addresses. This is an original TLT brief based on reporting by CryptoNewsZ, with live market data added, as of Tue, 27 Oct 2026 17:30:04 UTC.
This discovery highlights the growing sophistication of cyber threats targeting cryptocurrency users and exchanges, potentially compromising sensitive financial data and assets.
- Malicious Javascript found on Udesk's customer service platform
- Scripts steal login data and rewrite crypto deposit addresses
- Three trading platforms affected by the address-swapping attack
- Incident underscores need for enhanced security measures in crypto services
Blockchain security firm SlowMist has identified a sophisticated cyber threat targeting cryptocurrency users through the Udesk customer service platform. The security researchers found malicious Javascript scripts injected into Udesk's system that were designed to steal user login credentials.
According to reports from CryptoNewsZ and Unchained, the malicious scripts also contained functionality to rewrite cryptocurrency deposit addresses on three trading platforms. This means that users attempting to deposit funds could inadvertently send their assets to attacker-controlled wallets.
CryptoNewsZ and Unchained both corroborate that SlowMist issued a warning about the vulnerability, urging affected platforms to take immediate action to address the issue. The security firm emphasized the need for enhanced monitoring and security measures to prevent similar attacks in the future.
This incident highlights the increasing complexity of cyber threats in the cryptocurrency space. As attackers develop more sophisticated methods, it becomes crucial for platforms to implement robust security protocols to protect user data and assets.
The broader market remains relatively stable, with the total crypto market cap at $2.76 trillion and 
Bitcoin showing a modest 24-hour gain of 0.17%. The Fear & Greed Index stands at 48, indicating a neutral market sentiment. However, this security incident could influence market sentiment if it leads to increased concerns about platform security.
SlowMist Discovers Malicious Scripts Targeting Crypto Users — questions & answers
What is the impact of the malicious scripts?
The scripts steal login credentials and alter cryptocurrency deposit addresses, potentially leading to financial loss for affected users.
Which platforms are affected by the attack?
Three trading platforms have been affected by the address-swapping attack, though their names have not been disclosed.
What actions should users take?
Users should monitor their accounts for suspicious activity and follow any security recommendations issued by the affected platforms.
Which outlets reported this story?
This is an original TLT brief that synthesises reporting from CryptoNewsZ. It is not a copy of any one article — follow the source links above for the original reporting.
Original summary — not financial advice. This is an original TLT brief that summarises a development reported elsewhere and adds live market data for context; it is not the original article and reproduces no part of it. Follow the source link above for full details. Crypto is volatile and high-risk — always do your own research.