Zcash address receiving Maya swaps from the Udesk script attacker's wallets (follow-up to udeskqlobal[.]com report, Oct 2026)
- Scam type: Hack
- Chain: Zcash
- Project or site name: Malicious loader in Udesk customer-service scripts (udeskqlobal[.]com)
- Incident date: 2026-10-18
- Reported: 2026-10-27
- Last updated: 2026-10-27
This follow-up to blockint.ai report https://blockint.ai/c3?report=55054fc9-8166-48cc-84a3-526b22b6883a files one Zcash address: t1ZAXUDLMbKN3W9qhm7Cym3eNM8LXFDujAN, the destination of swaps from the Udesk script attacker's wallets. That report covers malicious code in Udesk customer-service scripts, loaded from udeskqlobal[.]com, that stole web session data and was set to swap crypto deposit addresses. Maya swaps: on 2026-10-18 the EVM address 0x9b6ecd00…37b2, one of the attacker addresses listed in the earlier report, made two ETH deposits to the Maya Protocol ETH router. Each deposit's…