Hackers Attack Domain Registrar Namecheap; Flood of DHL and Metamask Phishing Emails Follow
On Sunday, Feb. 12, 2023, the domain registrar Namecheap’s email account was compromised by hackers. Subsequently, a large number of individuals received phishing emails claiming to be from Metamask and DHL. These emails originated from the email platform Sendgrid, a service used by Namecheap for marketing correspondence. Namecheap Confirms Email Account Compromise and Disables Sendgrid Services
Multiple reports indicate that Namecheap was breached on Sunday and hackers leveraged the company’s email account through the Sendgrid service. Namecheap CEO Richard Kirkendall confirmed the compromise and said the firm has disabled Sendgrid services. “To be clear, the issue was within a third-party provider that we use to send our newsletter,” Kirkendall tweeted. “None of our own systems or customer accounts were breached. I sent a follow-up email to all affected users. The domains linked in the original phishing emails were also disabled.”
According to users who investigated the sent emails, the links led to a phishing campaign attempting to steal private information from the user. For example, the Metamask email led to a fake website trying to get the user to enter their mnemonic recovery phrase. Metamask also tweeted about the Namecheap emails and told recipients to ignore the messages. “Metamask does not collect KYC information and will never email you about your account,” the company tweeted. The Web3 wallet firm added: Do not enter your Secret Recovery Phrase on a website EVER. If you got an email today from Metamask or Namecheap or anyone else like this, ignore it & do not click its links!
Phishing attacks have been common in recent years, and hackers have used various methods to access people’s private information. According to reports, the DHL phishing email aims to provide the user with an invoice to get the user to enter payment information to resolve the fake issue. Once a user provides information like their mnemonic recovery phrase or other financial information, hackers can drain the funds from the account.
According to Beehive Cybersecurity, Namecheap’s team members took immediate action to resolve the issue. “We’d like to vouch that when we ourselves notified Namecheap of this, they acted promptly and treated it seriously,” Beehive Cybersecurity tweeted. “This is the A game of what we like to see from registrars.” Tags in this story A game, affected users, Beehive Cybersecurity, Breach, ceo, common sight, Customer Accounts, DHL, domains, email account, fake website, Financial Information, follow-up email, Funds, Hackers, immediate action, KYC information, marketing correspondence, metamask, methods, mnemonic recovery phrase, Namecheap, newsletter, Phishing, phishing attacks, phishing campaign, private information, recent years, registrars, Richard Kirkendall, Sendgrid, third-party provider, Web3 wallet
What measures could you take to protect yourself from phishing attacks like this one? Share your thoughts and strategies in the comments below. Jamie Redman
Jamie Redman is the News Lead at Bitcoin.com News and a financial tech journalist living in Florida. Redman has been an active member of the cryptocurrency community since 2011. He has a passion for Bitcoin, open-source code, and decentralized applications. Since September 2015, Redman has written more than 6,000 articles for Bitcoin.com News about the disruptive protocols emerging today. BUSD Redemptions Soar Near $290 Million in 8 Hours After NYDFS Consumer Alert NEWS | 2 hours ago Bakkt Shifts Focus to B2B Technology Solutions, Plans to Discontinue Consumer App NEWS | 6 hours ago
Image Credits: Shutterstock, Pixabay, Wiki Commons Previous articleBitcoin, Ethereum Technical Analysis: ETH Hits 1-Month Low, Falling Under $1,500 Next articleRenq Finance Is Holding Its First Stage of Token Presale Disclaimer: This article is for informational purposes only. It is not a direct offer or solicitation of an offer to buy or sell, or a recommendation or endorsement of any products, services, or companies. Bitcoin.com does not provide investment, tax, legal, or accounting advice. Neither the company nor the author is responsible, directly or indirectly, for any damage or loss caused or alleged to be caused by or in connection with the use of or reliance on any content, goods or services mentioned in this article. Read disclaimerShow comments More Popular NewsIn Case You Missed ItTony Hawk"s Latest NFTs to Come With Signed Physical Skateboards
Last December, the renowned professional skateboarder Tony Hawk released his “Last Trick” non-fungible token (NFT) collection via the NFT marketplace Autograph. Next week, Hawk will be auctioning the skateboards he used during his last tricks, and each of the NFTs ... read more.Draft Law Regulating Aspects of Crypto Taxation Submitted to Russian Parliament SEC Risks Violating Admin Procedure Act by Rejecting Spot Bitcoin ETFs, Says Grayscale FBI Issues Alert Concerning Malicious State-Sponsored North Korean Hackers Targeting Crypto Firms Economist Predicts the Fed"s Response to Inflation Will Push Crypto Higher