News for hackers. Stuff that matters.

A comment on Namecheap live chat social engineering leads to loss of 2 VPS. Parent comment

Re:Namecheap live chat social engineering leads to loss of 2... by matthewdrussell on Tuesday April 12, 2016 @11:11AM (#11480214)
Correct.

I'm surprised no one else has mentioned no 2FA for the email. The email being compromised opened the door to this happening.

[ Parent | on HN ]
Re:Namecheap live chat social engineering leads to loss of 2... by mbrameld on Tuesday April 12, 2016 @02:56PM (#11482463)
The email being compromised opened the door to his email being compromised. The door to his Namecheap account being compromised was apparently already wide open.
[ Parent | on HN ]
Re:Namecheap live chat social engineering leads to loss of 2... by levemi on Tuesday April 12, 2016 @03:04PM (#11482533)
No, OP didn't have 2FA enabled on their namecheap account. It was namecheap's fault for improper handling of the social engineering attack but OP could have protected themselves by having 2FA
[ Parent | on HN ]
Re:Namecheap live chat social engineering leads to loss of 2... by cname on Tuesday April 12, 2016 @05:43PM (#11483838)
The article pretty clearly states 2FA was enabled for the Namecheap account in question. In fact, that is sort of the whole point of the article.
[ Parent | on HN ]
Re:Namecheap live chat social engineering leads to loss of 2... by levemi on Tuesday April 12, 2016 @08:14PM (#11484706)
Oh this comment by CIO led me to think 2FA wasn't...

https://news.ycombinator.com/item?id=11480221

You should not be able to overcome 2FA with social engineering wtf!

[ Parent | on HN ]