News for hackers. Stuff that matters.

A comment on NameCheap's email hacked to send Metamask, DHL phishing emails.

Re:NameCheap's email hacked to send Metamask, DHL phishing e... by splittydev on Sunday February 12, 2023 @07:21PM (#34768660)
Seems like the hackers also had access to at least some customer data. Several people I know who were also Namecheap clients, including me, received those emails. Whether that data was also stored with the upstream provider remains to be seen. Might be an even bigger deal.
[ Parent | on HN ]
Re:NameCheap's email hacked to send Metamask, DHL phishing e... by NamecheapCEO on Sunday February 12, 2023 @07:25PM (#34768687)
A third part email provider we use for our newsletter was impacted. Our own systems and customer accounts were not breached.
[ Parent | on HN ]
Re:NameCheap's email hacked to send Metamask, DHL phishing e... by ginja on Sunday February 12, 2023 @07:50PM (#34768854)
What customer information did you store with that provider? Just names and emails, or was there anything else that attackers may have been able to access?
[ Parent | on HN ]
Re:NameCheap's email hacked to send Metamask, DHL phishing e... by notahacker on Monday February 13, 2023 @05:29AM (#34771989)
I don't know what they had stored, but the mailshots were addressed "Dear User" which suggests it was probably just emails

My email was also my domain name contact email, so I originally thought they'd obtained it by DNS lookup...

[ Parent | on HN ]
Re:NameCheap's email hacked to send Metamask, DHL phishing e... by thenickdude on Monday February 13, 2023 @06:01PM (#34782206)
Mine was addressed with my full name in the "To:" field, so they do have our full names (but just didn't mail-merge those into the body of the message).
[ Parent | on HN ]
Re:NameCheap's email hacked to send Metamask, DHL phishing e... by worksonmine on Sunday February 12, 2023 @08:32PM (#34769149)
You and who else? If it's one of your employees credentials getting compromised this excuse isn't going to age well and will do more harm than good. I assume you're using a big provider and there would be news of others being affected.
[ Parent | on HN ]