Namecheap
Phishing on Feb 12, 2023 · Phishing Attack
What happened
The email account of domain name registrar Namecheap has been hacked and hackers are using the account to send phishing emails. According to a report by BleepingComputer, the phishing campaign originated from SendGrid, an email platform used by Namecheap to send marketing emails and renewal notifications. The phishing emails pretended to be from logistics provider DHL and cryptocurrency wallet MetaMask. The email posing as MetaMask stated that the recipient's account had been suspended and would need to complete a KYC verification process before it could be reactivated. The email also contained a Namecheap marketing link that redirected users to a fake MetaMask page that asked users to enter their seed phrase or private key, seeking to steal the recipient's personal information and cryptocurrency wallet assets. The official MetaMask response stated that MetaMask will not collect KYC information, nor will it send emails to users about their accounts.
Details
- Date
- Feb 12, 2023
- Kind
- Phishing
- Method
- Phishing Attack
- How in
- Phishing and scams
- Target
- not stated
- Chains
- not stated
Reported by
Related incidents
Kevin Rose 2023 · Hack or exploit · $1M
HideYoApes 2023 · Hack or exploit · $208K
LuckyFactoryNFT 2023 · Phishing · undisclosed
Coinbase Wallet 2023 · Phishing · undisclosed
SwanBluechip, "Namecheap phishing, Feb 12, 2023: undisclosed lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht5f0e4e03ce/ (data as of 2026-11-01).