Scripts associated with the Udesk customer-service system were injected with malicious code, according to blockchain security firm SlowMist. According to Odaily, analysis of a JavaScript sample found it could collect cookies, browser local and session storage, and sensitive information from forms and authentication requests, potentially exposing user sessions and account credentials. The script could also replace deposit addresses displayed on specific websites and alter clipboard contents, potentially redirecting funds to attacker-controlled addresses. SlowMist recommended that affected websites stop loading the compromised scripts, restore trusted versions, check for data exfiltration, revoke potentially exposed sessions, and replace credentials in a clean environment. Users should verify deposit addresses through trusted channels and review transaction records.