Bitcoin

On Sunday, Feb. 12, 2023, the domain registrar Namecheap’s email account was compromised by hackers. Subsequently, a large number of individuals received phishing emails claiming to be from Metamask and DHL. These emails originated from the email platform Sendgrid, a service used by Namecheap for marketing correspondence.

Namecheap Confirms Email Account Compromise and Disables Sendgrid Services

Multiple reports indicate that Namecheap was breached on Sunday and hackers leveraged the company’s email account through the Sendgrid service. Namecheap CEO Richard Kirkendall confirmed the compromise and said the firm has disabled Sendgrid services. “To be clear, the issue was within a third-party provider that we use to send our newsletter,” Kirkendall tweeted. “None of our own systems or customer accounts were breached. I sent a follow-up email to all affected users. The domains linked in the original phishing emails were also disabled.”

According to users who investigated the sent emails, the links led to a phishing campaign attempting to steal private information from the user. For example, the Metamask email led to a fake website trying to get the user to enter their mnemonic recovery phrase. Metamask also tweeted about the Namecheap emails and told recipients to ignore the messages. “Metamask does not collect KYC information and will never email you about your account,” the company tweeted. The Web3 wallet firm added:

Do not enter your Secret Recovery Phrase on a website EVER. If you got an email today from Metamask or Namecheap or anyone else like this, ignore it & do not click its links!

Phishing attacks have been common in recent years, and hackers have used various methods to access people’s private information. According to reports, the DHL phishing email aims to provide the user with an invoice to get the user to enter payment information to resolve the fake issue. Once a user provides information like their mnemonic recovery phrase or other financial information, hackers can drain the funds from the account.

According to Beehive Cybersecurity, Namecheap’s team members took immediate action to resolve the issue. “We’d like to vouch that when we ourselves notified Namecheap of this, they acted promptly and treated it seriously,” Beehive Cybersecurity tweeted. “This is the A game of what we like to see from registrars.”

Tags in this story
A game, affected users, Beehive Cybersecurity, Breach, ceo, common sight, Customer Accounts, DHL, domains, email account, fake website, Financial Information, follow-up email, Funds, Hackers, immediate action, KYC information, marketing correspondence, metamask, methods, mnemonic recovery phrase, Namecheap, newsletter, Phishing, phishing attacks, phishing campaign, private information, recent years, registrars, Richard Kirkendall, Sendgrid, third-party provider, Web3 wallet

What measures could you take to protect yourself from phishing attacks like this one? Share your thoughts and strategies in the comments below.

Jamie Redman

Jamie Redman is the News Lead at Bitcoin.com News and a financial tech journalist living in Florida. Redman has been an active member of the cryptocurrency community since 2011. He has a passion for Bitcoin, open-source code, and decentralized applications. Since September 2015, Redman has written more than 6,000 articles for Bitcoin.com News about the disruptive protocols emerging today.




Image Credits: Shutterstock, Pixabay, Wiki Commons

Disclaimer: This article is for informational purposes only. It is not a direct offer or solicitation of an offer to buy or sell, or a recommendation or endorsement of any products, services, or companies. Bitcoin.com does not provide investment, tax, legal, or accounting advice. Neither the company nor the author is responsible, directly or indirectly, for any damage or loss caused or alleged to be caused by or in connection with the use of or reliance on any content, goods or services mentioned in this article.

Read disclaimer

Articles You May Like

Revolut expands in Canary Wharf despite regulatory limbo
Elon Musk defies gravity
San Diego County’s pension bonds bumped to AAA as part of Fitch criteria review
Labour would never seek to take UK back into the EU, says Rayner
Luxury homes on these beaches are losing value fast, as effects of climate change hit hard