RUG.TOOLSSlowMist reports malicious Udesk scripts targeting Web3 users
What was reported
SlowMist reports that malicious JavaScript injected through Udesk customer-service scripts collected session and submitted user data, while altering deposit addresses and copied transfer content on affected webpages. The source says the activity could enable session impersonation or redirect deposits to substituted recipients.
Why it matters
The reported behavior creates both account-takeover and fund-redirection risks for users of affected Web3 websites.
Evidence and limitations
- The source explicitly describes malicious script injection, session-data collection, and deposit-address substitution.
- No specific blockchain, affected project, loss amount, or contract address is identified in the supplied material.
Rug.Tools has not independently verified the publisher's incident claims. Reported allegations remain attributed to SlowMist; they are not presented as deterministic Rug.Tools findings.
Original source
Source publication time:
Read SlowMistThis report summarizes attributed source material and automated editorial checks. It is not a legal finding or investment advice. Rug.Tools does not identify a person or organization as responsible without independently verified evidence, and a token is never labeled safe merely because no incident appears in this feed. Reports may be corrected or unpublished when source information changes.