February 2023

Namecheap/SendGrid Hijack: Phishing With Perfect DMARC

Post author:Prabhu Kalyan Samal
Post published:February 27, 2023
Post category:Identity & Phishing Security Supply Chain Security

Phishers compromised a SendGrid supplier account and sent MetaMask-themed mail through Namecheap's legitimate pipeline — SPF, DKIM, and DMARC all passed.

Reddit’s Phishing Breach: When MFA Codes Get Phished Too

Post author:Prabhu Kalyan Samal
Post published:February 18, 2023
Post category:Identity & Phishing Security

A cloned intranet page harvested an employee's password and MFA code, opening hours of internal access. Phishing-resistant MFA and self-report lessons.

GoDaddy’s Multi-Year cPanel Breach: 2.5 Years of Dwell

Post author:Prabhu Kalyan Samal
Post published:February 16, 2023
Post category:Cloud & Infrastructure Security Supply Chain Security

GoDaddy's 2023 filing admitted intermittent intruder access since 2020, malware in cPanel servers, and email interception affecting ~6.95M customers.

ESXiArgs: The Ransomware Wave That EncryptEd Whole Estates

Post author:Prabhu Kalyan Samal
Post published:February 4, 2023
Post category:Cloud & Infrastructure Ransomware & Malware Security

ESXiArgs hit thousands of unpatched VMware ESXi hosts via old OpenSLP bugs in February 2023. Hypervisor ransomware and recovery-script lessons.