SlowMist Flags Udesk Script Code That Can Change Crypto Deposit Addresses

SlowMist identified code in Udesk scripts that can collect data and change crypto deposit addresses, creating a risk that users send funds to a different address than intended. The payload can change the address shown on a page and the value copied to a clipboard. That places the behavior at two points in a deposit process: what a user sees and what may be used to direct a transfer. A transfer using an altered address risks going to a destination other than the one the user meant to use.

Also reported by Coinotag, Unchained.

Source: TokenPost