Squarespace-registered DeFi platforms subjected to DNS hijacking – scworld.com

(Adobe Stock)
Several decentralized finance platforms, including Compound Finance, Celer Network, and Pendle, had domains registered with Squarespace impacted by DNS hijacking attacks on Thursday, BleepingComputer reports.

Both Celer and Pendle reported the recovery of their domains, with the latter emphasizing that no cryptocurrency assets had been compromised as a result of the intrusion. “…[A]ttackers exploited a vulnerability in Squarespace, hijacking domains hosted on their platform. Security experts are still working out the exact mechanism for the hijacking attacks, but many domains (including Pendle’s) that were migrated from Google to Squarespace have been affected,” said Pendle in a post on X, formerly Twitter. Additional details regarding the domain takeover process remain unclear but the compromise has been associated by cryptocurrency security researchers Andrew Mohawk, Taylor Monahan, and Samczsun with the multi-factor authentication deactivation during domain migration. Automated domain-linked account creation and reseller access may have also been exploited by threat actors to facilitate domain hijacking, researchers said.
SC StaffJanuary 17, 2025
Included in the exposed firewall data are IP addresses, passwords, and configuration files, said Belsen Group in its post on the hacking forum.
Paul WagenseilJanuary 17, 2025
If you find yourself being the default IT technician for your friends and family, here’s what you can do to keep them safe online.
Shaun NicholsJanuary 16, 2025
GoDaddy must adhere to a number of security compliance requirements by the FTC.
Wed Mar 5
On-Demand Event
On-Demand Event

By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy.

Related Terms

You can skip this ad in 5 seconds
Copyright © 2025 CyberRisk Alliance, LLC All Rights Reserved. This material may not be published, broadcast, rewritten or redistributed in any form without prior authorization.
Your use of this website constitutes acceptance of CyberRisk Alliance Privacy Policy and Terms of Use.

source

About The Author

admin

See author's posts