Tonight's warning breaks the safety check most of us rely on — it stopped me mid-scroll.
SlowMist found malicious code in the Udesk chat widget: a tampered file loading a second script from a lookalike domain, udeskqlobal[.]com, harvesting login data from pages that load it. On deposit pages at MGBX, Biking Exchange and BitxEX, it goes further, swapping displayed deposit addresses every 200 milliseconds for attacker wallets across BTC, EVM chains, Tron, Solana, Litecoin and Dogecoin, and rewriting clipboard copies.
What worries me most: checking the pasted address against the page won't catch it, since both can show the same tampered value. SlowMist hasn't confirmed any funds lost or how the code got in — that part is unknown.
If you use those platforms, verify deposit addresses beyond the page. Context only: $BTC $80,542 (+0.5%/24h), $ETH $2,347 (+1.2%), Binance spot, 23:55 WIB — no reaction tied to this warning. DYOR.
When did you last verify a deposit address elsewhere?
$BTC #CryptoNews #Security #Udesk #SlowMist
SlowMist found malicious code in the Udesk chat widget: a tampered file loading a second script from a lookalike domain, udeskqlobal[.]com, harvesting login data from pages that load it. On deposit pages at MGBX, Biking Exchange and BitxEX, it goes further, swapping displayed deposit addresses every 200 milliseconds for attacker wallets across BTC, EVM chains, Tron, Solana, Litecoin and Dogecoin, and rewriting clipboard copies.
What worries me most: checking the pasted address against the page won't catch it, since both can show the same tampered value. SlowMist hasn't confirmed any funds lost or how the code got in — that part is unknown.
If you use those platforms, verify deposit addresses beyond the page. Context only: $BTC $80,542 (+0.5%/24h), $ETH $2,347 (+1.2%), Binance spot, 23:55 WIB — no reaction tied to this warning. DYOR.
When did you last verify a deposit address elsewhere?
$BTC #CryptoNews #Security #Udesk #SlowMist