Zcash address receiving Maya swaps from the Udesk script attacker's wallets (follow-up to udeskqlobal[.]com report, Oct 2026)

• Scam type: Hack
• Chain: Zcash
• Project or site name: Malicious loader in Udesk customer-service scripts (udeskqlobal[.]com)
• Incident date: 2026-10-18
• Reported: 2026-10-27
• Last updated: 2026-10-27

This follow-up to blockint.ai report https://blockint.ai/c3?report=55054fc9-8166-48cc-84a3-526b22b6883a files one Zcash address: t1ZAXUDLMbKN3W9qhm7Cym3eNM8LXFDujAN, the destination of swaps from the Udesk script attacker's wallets. That report covers malicious code in Udesk customer-service scripts, loaded from udeskqlobal[.]com, that stole web session data and was set to swap crypto deposit addresses. Maya swaps: on 2026-10-18 the EVM address 0x9b6ecd00…37b2, one of the attacker addresses listed in the earlier report, made two ETH deposits to the Maya Protocol ETH router. Each deposit's…

Other addresses in this report: t1ZAXUDLMbKN3W9qhm7Cym3eNM8LXFDujAN

Linked reports: Malicious code in Udesk customer-service scripts steals web session data and swaps crypto deposit addresses, loaded from udeskqlobal[.]com (Oct 2026)