{"id":17579,"date":"2023-02-13T14:34:40","date_gmt":"2023-02-13T14:34:40","guid":{"rendered":"https:\/\/crowdfundjunction.com\/blog\/hackers-attack-domain-registrar-namecheap-flood-of-dhl-and-metamask-phishing-emails-follow-bitcoin-news\/"},"modified":"2023-02-13T14:34:40","modified_gmt":"2023-02-13T14:34:40","slug":"hackers-attack-domain-registrar-namecheap-flood-of-dhl-and-metamask-phishing-emails-follow-bitcoin-news","status":"publish","type":"post","link":"https:\/\/crowdfundjunction.com\/blog\/hackers-attack-domain-registrar-namecheap-flood-of-dhl-and-metamask-phishing-emails-follow-bitcoin-news\/","title":{"rendered":"Hackers Attack Domain Registrar Namecheap; Flood of DHL and Metamask Phishing Emails Follow \u2013 Bitcoin News"},"content":{"rendered":"<p><b>(Originally posted on : Bitcoin News )<\/b><br \/>\n<\/p>\n<div id=\"\">\n<header class=\"article__header\">\n<\/header>\n<div class=\"featured_image_container\">\n\n<\/div>\n<p><strong>On Sunday, Feb. 12, 2023, the domain registrar Namecheap\u2019s email account was compromised by hackers. Subsequently, a large number of individuals received phishing emails claiming to be from Metamask and DHL. These emails originated from the email platform Sendgrid, a service used by Namecheap for marketing correspondence.<\/strong><\/p>\n<h2>Namecheap Confirms Email Account Compromise and Disables Sendgrid Services<\/h2>\n<p>Multiple <a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/namecheaps-email-hacked-to-send-metamask-dhl-phishing-emails\/\">reports<\/a> indicate that Namecheap was breached on Sunday and hackers leveraged the company\u2019s email account through the Sendgrid service. Namecheap CEO Richard Kirkendall <a href=\"https:\/\/twitter.com\/NamecheapCEO\/status\/1624951481072746496?s=20&amp;t=kyLW0TGeM4Wasi3lxWq4ZA\">confirmed<\/a> the compromise and said the firm has disabled Sendgrid services. \u201cTo be clear, the issue was within a third-party provider that we use to send our newsletter,\u201d Kirkendall tweeted. \u201cNone of our own systems or customer accounts were breached. I sent a follow-up email to all affected users. The domains linked in the original phishing emails were also disabled.\u201d<\/p>\n<p>According to users who investigated the sent emails, the links led to a phishing campaign attempting to steal private information from the user. For example, the Metamask email led to a fake website trying to get the user to enter their mnemonic recovery phrase. Metamask also <a href=\"https:\/\/twitter.com\/MetaMask\/status\/1625006237023866880?s=20&amp;t=5rgLn9QSaDUpIMCs_PRFgg\">tweeted<\/a> about the Namecheap emails and told recipients to ignore the messages. \u201cMetamask does not collect KYC information and will never email you about your account,\u201d the company tweeted. The Web3 wallet firm added:<\/p>\n<blockquote>\n<p>Do not enter your Secret Recovery Phrase on a website EVER. If you got an email today from Metamask or Namecheap or anyone else like this, ignore it &amp; do not click its links!<\/p>\n<\/blockquote>\n<p>Phishing attacks have been common in recent years, and hackers have used various methods to access people\u2019s private information. According to reports, the DHL phishing email aims to provide the user with an invoice to get the user to enter payment information to resolve the fake issue. Once a user provides information like their mnemonic recovery phrase or other financial information, hackers can drain the funds from the account.<\/p>\n<p>According to Beehive Cybersecurity, Namecheap\u2019s team members took immediate action to resolve the issue. \u201cWe\u2019d like to vouch that when we ourselves notified Namecheap of this, they acted promptly and treated it seriously,\u201d Beehive Cybersecurity <a href=\"https:\/\/twitter.com\/BeeHiveCyberSec\/status\/1624984176775806976?s=20&amp;t=kyLW0TGeM4Wasi3lxWq4ZA\">tweeted<\/a>. \u201cThis is the A game of what we like to see from registrars.\u201d<\/p>\n<div class=\"article__body__tags-related__tags\">\n<h6 class=\"article__body__tags-related__title\">\nTags in this story<br \/>\n<\/h6>\n<div class=\"article__body__tags\"><a href=\"https:\/\/news.bitcoin.com\/tag\/a-game\/\">A game<\/a>, <a href=\"https:\/\/news.bitcoin.com\/tag\/affected-users\/\">affected users<\/a>, <a href=\"https:\/\/news.bitcoin.com\/tag\/beehive-cybersecurity\/\">Beehive Cybersecurity<\/a>, <a href=\"https:\/\/news.bitcoin.com\/tag\/breach\/\">Breach<\/a>, <a href=\"https:\/\/news.bitcoin.com\/tag\/ceo\/\">ceo<\/a>, <a href=\"https:\/\/news.bitcoin.com\/tag\/common-sight\/\">common sight<\/a>, <a href=\"https:\/\/news.bitcoin.com\/tag\/customer-accounts\/\">Customer Accounts<\/a>, <a href=\"https:\/\/news.bitcoin.com\/tag\/dhl\/\">DHL<\/a>, <a href=\"https:\/\/news.bitcoin.com\/tag\/domains\/\">domains<\/a>, <a href=\"https:\/\/news.bitcoin.com\/tag\/email-account\/\">email account<\/a>, <a href=\"https:\/\/news.bitcoin.com\/tag\/fake-website\/\">fake website<\/a>, <a href=\"https:\/\/news.bitcoin.com\/tag\/financial-information\/\">Financial Information<\/a>, <a href=\"https:\/\/news.bitcoin.com\/tag\/follow-up-email\/\">follow-up email<\/a>, <a href=\"https:\/\/news.bitcoin.com\/tag\/funds\/\">Funds<\/a>, <a href=\"https:\/\/news.bitcoin.com\/tag\/hackers\/\">Hackers<\/a>, <a href=\"https:\/\/news.bitcoin.com\/tag\/immediate-action\/\">immediate action<\/a>, <a href=\"https:\/\/news.bitcoin.com\/tag\/kyc-information\/\">KYC information<\/a>, <a href=\"https:\/\/news.bitcoin.com\/tag\/marketing-correspondence\/\">marketing correspondence<\/a>, <a href=\"https:\/\/news.bitcoin.com\/tag\/metamask\/\">metamask<\/a>, <a href=\"https:\/\/news.bitcoin.com\/tag\/methods\/\">methods<\/a>, <a href=\"https:\/\/news.bitcoin.com\/tag\/mnemonic-recovery-phrase\/\">mnemonic recovery phrase<\/a>, <a href=\"https:\/\/news.bitcoin.com\/tag\/namecheap\/\">Namecheap<\/a>, <a href=\"https:\/\/news.bitcoin.com\/tag\/newsletter\/\">newsletter<\/a>, <a href=\"https:\/\/news.bitcoin.com\/tag\/phishing\/\">Phishing<\/a>, <a href=\"https:\/\/news.bitcoin.com\/tag\/phishing-attacks\/\">phishing attacks<\/a>, <a href=\"https:\/\/news.bitcoin.com\/tag\/phishing-campaign\/\">phishing campaign<\/a>, <a href=\"https:\/\/news.bitcoin.com\/tag\/private-information\/\">private information<\/a>, <a href=\"https:\/\/news.bitcoin.com\/tag\/recent-years\/\">recent years<\/a>, <a href=\"https:\/\/news.bitcoin.com\/tag\/registrars\/\">registrars<\/a>, <a href=\"https:\/\/news.bitcoin.com\/tag\/richard-kirkendall\/\">Richard Kirkendall<\/a>, <a href=\"https:\/\/news.bitcoin.com\/tag\/sendgrid\/\">Sendgrid<\/a>, <a href=\"https:\/\/news.bitcoin.com\/tag\/third-party-provider\/\">third-party provider<\/a>, <a href=\"https:\/\/news.bitcoin.com\/tag\/web3-wallet\/\">Web3 wallet<\/a><\/div>\n<\/div>\n<p><em><strong>What measures could you take to protect yourself from phishing attacks like this one? Share your thoughts and strategies in the comments below.<\/strong><\/em><\/p>\n<div class=\"article__body__author\">\n<div class=\"article__body__author__avatar\">\n<img src=\"https:\/\/static.news.bitcoin.com\/wp-content\/uploads\/2018\/04\/2Khomers-150x150.jpg\" srcset=\"https:\/\/static.news.bitcoin.com\/wp-content\/uploads\/2018\/04\/2Khomers-150x150.jpg 1x, https:\/\/static.news.bitcoin.com\/wp-content\/uploads\/2018\/04\/2Khomers-300x300.jpg 2x\" class=\"avatar avatar-150 photo\"\/>\n<\/div>\n<div class=\"article__body__author__info\">\n<h6 class=\"article__body__author__info__name\">\nJamie Redman <\/h6>\n<p class=\"article__body__author__info__about\">\nJamie Redman is the News Lead at Bitcoin.com News and a financial tech journalist living in Florida. Redman has been an active member of the cryptocurrency community since 2011. He has a passion for Bitcoin, open-source code, and decentralized applications. Since September 2015, Redman has written more than 6,000 articles for Bitcoin.com News about the disruptive protocols emerging today.<br \/><span class=\"td-social-icon-wrap\"><br \/>\n<a target=\"_blank\" href=\"https:\/\/twitter.com\/jamieCrypto\" title=\"Twitter\" rel=\"noopener\"><br \/>\n<i class=\"td-icon-font td-icon-twitter\"\/><br \/>\n<\/a><br \/>\n<\/span>\n<\/p>\n<\/div>\n<\/div>\n<p class=\"images_credits\"><em><b>Image Credits<\/b>: Shutterstock, Pixabay, Wiki Commons<\/em><\/p>\n<div class=\"disclaimer\">\n<p><strong>Disclaimer<\/strong>: This article is for informational purposes only. It is not a direct offer or solicitation of an offer to buy or sell, or a recommendation or endorsement of any products, services, or companies. <a href=\"https:\/\/bitcoin.com\">Bitcoin.com<\/a> does not provide investment, tax, legal, or accounting advice. Neither the company nor the author is responsible, directly or indirectly, for any damage or loss caused or alleged to be caused by or in connection with the use of or reliance on any content, goods or services mentioned in this article.<\/p>\n<\/div>\n<div class=\"bottom_article_widgets\">\n<aside id=\"bn_widget_spacing-18\" class=\"td_block_template_1 widget widget_bn_widget_spacing\"\/>\n<aside id=\"custom_html-21\" class=\"widget_text td_block_template_1 widget widget_custom_html\">\n<h4 class=\"block-title\"><span>More Popular News<\/span><\/h4>\n<\/aside>\n<aside id=\"bn_widget_spacing-19\" class=\"td_block_template_1 widget widget_bn_widget_spacing\"\/>\n<aside id=\"custom_html-46\" class=\"widget_text td_block_template_1 widget widget_custom_html\"\/>\n<aside id=\"bn_widget_spacing-20\" class=\"td_block_template_1 widget widget_bn_widget_spacing\"\/>\n<aside id=\"custom_html-30\" class=\"widget_text td_block_template_1 widget widget_custom_html\">\n<h4 class=\"block-title\"><span>In Case You Missed It<\/span><\/h4>\n<\/aside>\n<\/div>\n<\/div>\n<p><script async src=\"\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><script>(function(d, s, id) {\n        var js, fjs = d.getElementsByTagName(s)[0];\n        if (d.getElementById(id)) return;\n        js = d.createElement(s); js.id = id;\n        js.src=\"https:\/\/connect.facebook.net\/en_US\/sdk.js#xfbml=1&version=v3.2\";\n        fjs.parentNode.insertBefore(js, fjs);\n    }(document, 'script', 'facebook-jssdk'));<\/script><br \/>\n<br \/><a href=\"https:\/\/news.bitcoin.com\/hackers-attack-domain-registrar-namecheap-flood-of-dhl-and-metamask-phishing-emails-follow\/\">Source link <\/a><br \/>\n<br \/><\/p>\n","protected":false},"excerpt":{"rendered":"<p>(Originally posted on : Bitcoin News ) On Sunday, Feb. 12, 2023, the domain registrar Namecheap\u2019s email account was compromised by hackers. Subsequently, a large number of individuals received phishing emails claiming to be from Metamask and DHL. These emails originated from the email platform Sendgrid, a service used by Namecheap for marketing correspondence. Namecheap [&hellip;]<\/p>\n","protected":false},"author":19,"featured_media":17580,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0},"categories":[32],"tags":[],"_links":{"self":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/posts\/17579"}],"collection":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/users\/19"}],"replies":[{"embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/comments?post=17579"}],"version-history":[{"count":0,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/posts\/17579\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/media\/17580"}],"wp:attachment":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/media?parent=17579"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/categories?post=17579"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/tags?post=17579"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}