Urgent security warning that may affect all internet users
community.namecheap.com
Urgent security warning that may affect all internet users
1–10 of 120 posts
Re: Urgent security warning that may affect all internet users
#2> The group behind this is using the stored usernames and passwords to simulate a web browser login through fake browser software. This software simulates the actual login process a user would use if they are using Firefox/Safari/Chrome to access their Namecheap account.
So basically PhantomJS? Or is it more sophisticated than that?
Also, this might actually let me see if I'm in the list, since I will get an unsolicited 2FA text if they try my account.
Re: Urgent security warning that may affect all internet users
#3I get a 404?
Re: Urgent security warning that may affect all internet users
#4Re: Urgent security warning that may affect all internet users
#5I get a 404?
Permalink results in 404, but the post is still viewable on the blog homepage: http://community.namecheap.com/blog/
Re: Urgent security warning that may affect all internet users
#6google cache: http://webcache.googleusercontent.com/search?output=search&s...
Thanks for pointing to a cached version. ...strange that the original is unavailable.
Re: Urgent security warning that may affect all internet users
#7I get a 404?
Permalink results in 404, but the post is still viewable on the blog homepage: http://community.namecheap.com/blog/
Re: Urgent security warning that may affect all internet users
#8google cache: http://webcache.googleusercontent.com/search?output=search&s...
Thanks for pointing to a cached version. ...strange that the original is unavailable.
The original should be available without issue. Can you please let me know what happens when you try to access it? What ISP are you using?
Thanks, Tamar from Namecheap
Re: Urgent security warning that may affect all internet users
#9> The group behind this is using the stored usernames and passwords to simulate a web browser login through fake browser software. This software simulates the actual login process a user would use if they are using Firefox/Safari/Chrome to access their Namecheap account. So basically PhantomJS? Or is it more sophisticated than that? Also, this might actually let me see if I'm in the list, since I will get an unsolici…
My guess would be Selenium.
Re: Urgent security warning that may affect all internet users
#10> The group behind this is using the stored usernames and passwords to simulate a web browser login through fake browser software. This software simulates the actual login process a user would use if they are using Firefox/Safari/Chrome to access their Namecheap account. So basically PhantomJS? Or is it more sophisticated than that? Also, this might actually let me see if I'm in the list, since I will get an unsolici…
It's likely just a multi-instance setup of Hydra or wfuzz, PhantomJS would have too much overhead.