BTC $80,035.74 -1.61%
ETH $2,318.14 -2.02%
BNB $752.20 +0.47%
XRP $1.29 -2.83%
SOL $100.40 -2.06%
TRX $0.3312 -0.14%
DOGE $0.0782 -2.32%
ADA $0.1994 -3.53%
BCH $279.85 -6.31%
LINK $11.51 -2.35%
HYPE $79.31 -3.15%
AAVE $131.16 -2.96%
SUI $0.9120 -2.83%
XLM $0.1686 -1.74%
ZEC $1,251.26 -4.76%
AAPL $347.76 +0.33%
AMZN $251.94 -0.80%
GOOGL $292.10 -10.06%
MSFT $552.02 +4.15%
META $621.28 -0.33%
NVDA $214.35 -2.42%
TSLA $402.66 -1.68%
SNDK $1,363.72 +0.14%
INTC $92.48 -2.92%
SPCX $144.24 -3.79%
MU $955.00 -0.94%
AMD $564.00 -0.76%
BTC $80,035.74 -1.61%
ETH $2,318.14 -2.02%
BNB $752.20 +0.47%
XRP $1.29 -2.83%
SOL $100.40 -2.06%
TRX $0.3312 -0.14%
DOGE $0.0782 -2.32%
ADA $0.1994 -3.53%
BCH $279.85 -6.31%
LINK $11.51 -2.35%
HYPE $79.31 -3.15%
AAVE $131.16 -2.96%
SUI $0.9120 -2.83%
XLM $0.1686 -1.74%
ZEC $1,251.26 -4.76%
AAPL $347.76 +0.33%
AMZN $251.94 -0.80%
GOOGL $292.10 -10.06%
MSFT $552.02 +4.15%
META $621.28 -0.33%
NVDA $214.35 -2.42%
TSLA $402.66 -1.68%
SNDK $1,363.72 +0.14%
INTC $92.48 -2.92%
SPCX $144.24 -3.79%
MU $955.00 -0.94%
AMD $564.00 -0.76%

service

All
Article
Flash

Slow Fog: Udesk customer service script was implanted with malicious code that can steal user session data and replace recharge addresses

According to Slow Fog's disclosure, its security personnel discovered that the script udeskApi.2026-10-16.cached.js related to the Udesk customer service system was implanted with a malicious loader during routine threat intelligence checks. This loader hides the address through hexadecimal encoding and asynchronously loads the remote script deeps.js (sourced from udeskqlobal[.]com, note that the domain name starts with the letter q). This script reads accessible Cookies, localStorage, and sessionStorage on the page, intercepts form and login/authentication requests, and sends data to udeskqlobal[.]com/c.php. Attackers may use this to impersonate sessions or take over accounts. This data collection behavior is not restricted by the target site's rules, and unmatched pages may also be affected.According to Slow Fog's analysis, this script also targets three types of sites: mgbx[.]com, bikingex[.], and bitxex[.]io, scanning the recharge page every 200 milliseconds and replacing identified recharge addresses with preset BTC, EVM, TRON, Solana, LTC, and DOGE addresses. At the same time, the script manipulates the clipboard API, replaces copy buttons, and intercepts copy events, making users see and copy tampered addresses. If users transfer funds to this address, the money will flow into the attacker's address.

first_img Blockstream launched institutional consulting services and established an office in Lugano, Switzerland

Bitcoin infrastructure company Blockstream announced the launch of consulting services for financial institutions and established an office in Lugano, Switzerland. This business enables banks, asset management institutions, and others to directly connect with Blockstream's engineering team and Bitcoin infrastructure. Blockstream Consulting Services will assist institutions in assessing, designing, and implementing Bitcoin-based financial infrastructure, as well as developing related solutions such as tokenized asset issuance and confidential settlements, covering areas such as technology strategy, system architecture, integration, and implementation.Blockstream stated that the Lugano office will serve Swiss clients, including those in Zurich, Geneva, and Zug, and will act as its European business hub, supporting client relationships, strategic partnerships, and collaboration with local financial and technology communities. The company's Chief Marketing Officer Peter Bain stated that Switzerland has a long-standing banking tradition and a regulatory framework supporting digital assets, making it an important market for Blockstream; the company aims to provide local expertise in markets where it sees demand for Bitcoin infrastructure, and the consulting business along with the Lugano office will bring customized Bitcoin solutions to European financial institutions.Founded in 2014, Blockstream's business covers Bitcoin custody, settlement, payments, asset issuance, and self-custody, with products including the sidechain Liquid Network, Elements, Simplicity, Core Lightning, Jade hardware wallet, and Blockstream App. The company has launched Simplicity smart contracts on the Liquid network and added Lightning Network support for the Jade hardware wallet. Co-founder and CEO Adam Back stated that the next phase of Bitcoin adoption is to integrate into the existing financial system, and the company's experience in Bitcoin cryptography, protocol development, and engineering can address the related complexities. This announcement did not disclose the pricing of the consulting services, the size of the Lugano office's staff, or the names of clients.

first_img The Internal Revenue Service (IRS) of the United States plans to reform the voluntary disclosure program, reduce tax penalties, and expedite processing

According to a report by Forbes on Friday, the Internal Revenue Service (IRS) is preparing to reform its voluntary disclosure program, planning to reduce penalties and expedite the processing of tax violation cases, including those involving cryptocurrency.Jarod Koopman, head of the IRS Criminal Investigation Division, stated that the agency aims to launch the revised program before December and to close cases within 120 days after taxpayers complete the required submission process. He noted that the new plan will not establish a separate disclosure channel for digital assets but will apply the same voluntary disclosure procedures to other forms of tax noncompliance. Koopman also mentioned that the penalties under the revised program will be significantly lower than current levels, although he did not provide specific amounts. The IRS is considering allowing taxpayers to settle debts through installment payments or settlement offers.According to Forbes, the current program often takes a year or longer to complete and primarily targets taxpayers who intentionally fail to comply with tax laws and may face criminal prosecution, rather than those who make reporting errors due to negligence. Meanwhile, legislative efforts are advancing another voluntary disclosure program aimed at cryptocurrency taxpayers. Section 502 of the Digital Asset Taxation Certainty Act will establish a correction process with clear penalty standards for past violations, and the bill was passed by the House Ways and Means Committee in September.
app_icon
ChainCatcher Building the Web3 world with innovations.