SlowMist said code in Udesk scripts can interfere with crypto deposits by altering the destination details shown to users or copied for a transfer.
The firm said the payload gathers data under criteria that extend beyond three rules aimed at specific websites. It can also change the destination information users see onscreen or place on the clipboard.
A crypto deposit address identifies the destination for transferred funds. SlowMist said using modified details could direct a payment to a recipient the user did not choose.
The firm's account links data gathering with tampering that affects deposit instructions.
The reported code therefore raises concerns about both information collection and deposits sent to an unintended destination.
