Namecheap.com Suddenly Got Hacked For Phishing Campaign Disguising As MetaMask

Key Points:

• Namecheap’s SendGrid email account was stolen and used to launch a phishing attempt posing as DHL and MetaMask.
• MetaMask reminded its users not to click on any links in unsolicited emails purporting to be from the company.

The email account of domain name registrar Namecheap was compromised, resulting in a broad phishing effort aiming at stealing cryptocurrency from potentially thousands of its users.

The hack was tracked back to SendGrid, Namecheap’s email platform. Hackers used it to carry out their phishing schemes. That account is now in good hands.

Following the compromise of Namecheap’s SendGrid, the offender sent fraudulent emails to Namecheap users alleging to be from delivery business DHL or cryptocurrency wallet MetaMask. The DHL phishing email posed as a delivery cost invoice, whilst the MetaMask phishing email indicated that KYC verification was required to avoid wallet suspension.

If the recipient followed the link in the email, they would be taken to a phony page that asked for their private key or secret recovery phrase, which the attackers could then use to steal the funds from their wallet.

MetaMask issued a statement in reaction to the hack, warning users to be aware of unsolicited emails purporting to be from the team, saying If some received an email today from MetaMask, Namecheap, or anyone else similar to this, disregard it and do not click its links.

Phishing is a type of cyber assault that attempts to obtain sensitive information such as credit card details or, in the instance of MetaMask, the seed phrase of cryptocurrency wallets.

A phishing campaign is a concerted effort by attackers to carry out many phishing attacks at the same time, typically via emails or bogus websites. The emails or websites are meant to appear legitimate in order to deceive victims into providing personal information. The data is then utilized to commit fraud, such as identity theft or unlawful access to financial accounts.

DISCLAIMER: The Information on this website is provided as general market commentary and does not constitute investment advice. We encourage you to do your own research before investing.

Join us to keep track of news: https://linktr.ee/coincu

Thana

Coincu News