SlowMist: Udesk customer service scripts injected with malware to steal data, swap deposit addresses

The address-swapping capability is the part that matters most for crypto users: it turns a customer-support tool into a deposit-redirection vector, and compromised sessions and credentials widen the exposure beyond any single site. Anyone whose platform relies on third-party support scripts inherits this risk without ever touching crypto code directly. The open question is scope — which sites carry the injected script, and whether the tampering originated at the vendor or in transit — since that determines how contained this stays.