{"id":445324,"date":"2024-09-25T19:30:41","date_gmt":"2024-09-25T18:30:41","guid":{"rendered":"https:\/\/cryptoslate.com\/?p=445324"},"modified":"2024-09-25T19:08:15","modified_gmt":"2024-09-25T18:08:15","slug":"ether-fi-foils-domain-hijack-attempt-credits-enhanced-security-measures","status":"publish","type":"post","link":"https:\/\/cryptoslate.com\/ether-fi-foils-domain-hijack-attempt-credits-enhanced-security-measures\/","title":{"rendered":"Ether.fi foils domain hijack attempt, credits enhanced security measures"},"content":{"rendered":"

DeFi protocol Ether.fi<\/a> reported an attempted domain account takeover on Sept. 24 involving its domain registrar, Gandi.net, according to a Sept. 25 github post<\/a> by the protocol.<\/p>\n

According to Ether.fi, the incident saw attackers try to exploit Gandi's recovery process to gain control of Ether.fi\u2019s domain. The first indication of the breach came at 16:38 UTC when the team received an email recovery notification from Gandi.<\/p>\n

After verifying the email's SPF, DKIM, and DMARC records, the team confirmed that attackers had attempted to access their account by using Gandi's legitimate recovery flow.<\/p>\n

Ether.fi promptly engaged Gandi on multiple platforms, and by 19:30 UTC, the account was successfully locked to prevent further tampering. The company restored its nameserver configurations, and an internal review found no evidence of a breach within its systems.<\/p>\n

Ether.fi said:<\/p>\n

“In light of recent attacks on similar platforms, we had already upgraded security by enforcing hardware authentication across key systems.”<\/p><\/blockquote>\n

It further noted that these preventive steps helped secure their infrastructure.\u00a0Gandi\u2019s rapid response, combined with Ether.fi's safeguards prevented unauthorized access to the domain and ensured the security of their websites, applications, and email services.<\/p>\n

Ether.fi expressed gratitude to its security partners, including Seal911, Doppel, Ethena, and Distrust, who offered immediate assistance during the incident.<\/p>\n

The protocol assured users that all funds remained safe and no malicious decentralized applications (dApps) were deployed.\u00a0It added that it would release additional details about the incident in the coming days in coordination with Gandi's team.<\/p>\n","protected":false},"excerpt":{"rendered":"

DeFi protocol Ether.fi reported an attempted domain account takeover on Sept. 24 involving its domain registrar, Gandi.net, according to a Sept. 25 github post by the protocol. According to Ether.fi, the incident saw attackers try to exploit Gandi’s recovery process to gain control of Ether.fi\u2019s domain. The first indication of the breach came at 16:38 […]<\/p>\n","protected":false},"author":1250,"featured_media":445325,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[46940,16041],"tags":[],"post_folder":[],"acf":[],"yoast_head":"\nEther.fi foils domain hijack attempt, credits enhanced security measures<\/title>\n<meta name=\"description\" content=\"Coordinated efforts and advanced safeguards save Ether.fi\u2019s domain from malicious takeover on Sept. 24.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cryptoslate.com\/ether-fi-foils-domain-hijack-attempt-credits-enhanced-security-measures\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Ether.fi foils domain hijack attempt, credits enhanced security measures\" \/>\n<meta property=\"og:description\" content=\"Coordinated efforts and advanced safeguards save Ether.fi\u2019s domain from malicious takeover on Sept. 24.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cryptoslate.com\/ether-fi-foils-domain-hijack-attempt-credits-enhanced-security-measures\/\" \/>\n<meta property=\"og:site_name\" content=\"CryptoSlate\" \/>\n<meta property=\"article:published_time\" content=\"2024-09-25T18:30:41+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-09-25T18:08:15+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2024\/09\/hack.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"630\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Assad Jafri\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@cryptoslate\" \/>\n<meta name=\"twitter:site\" content=\"@cryptoslate\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Assad Jafri\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"NewsArticle\",\"@id\":\"https:\/\/cryptoslate.com\/ether-fi-foils-domain-hijack-attempt-credits-enhanced-security-measures\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/cryptoslate.com\/ether-fi-foils-domain-hijack-attempt-credits-enhanced-security-measures\/\"},\"author\":{\"name\":\"Assad Jafri\",\"@id\":\"https:\/\/cryptoslate.com\/#\/schema\/person\/3db28ca07ba41170a9d49a2e887d4882\"},\"headline\":\"Ether.fi foils domain hijack attempt, credits enhanced security measures\",\"datePublished\":\"2024-09-25T18:30:41+00:00\",\"dateModified\":\"2024-09-25T18:30:41+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/cryptoslate.com\/ether-fi-foils-domain-hijack-attempt-credits-enhanced-security-measures\/\"},\"wordCount\":266,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/cryptoslate.com\/#organization\"},\"articleSection\":[\"DeFi\",\"Hacks\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/cryptoslate.com\/ether-fi-foils-domain-hijack-attempt-credits-enhanced-security-measures\/#respond\"]}],\"copyrightYear\":\"2024\",\"copyrightHolder\":{\"@id\":\"https:\/\/cryptoslate.com\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/cryptoslate.com\/ether-fi-foils-domain-hijack-attempt-credits-enhanced-security-measures\/\",\"url\":\"https:\/\/cryptoslate.com\/ether-fi-foils-domain-hijack-attempt-credits-enhanced-security-measures\/\",\"name\":\"Ether.fi foils domain hijack attempt, credits enhanced security measures\",\"isPartOf\":{\"@id\":\"https:\/\/cryptoslate.com\/#website\"},\"datePublished\":\"2024-09-25T18:30:41+00:00\",\"dateModified\":\"2024-09-25T18:30:41+00:00\",\"description\":\"Coordinated efforts and advanced safeguards save Ether.fi\u2019s domain from malicious takeover on Sept. 24.\",\"breadcrumb\":{\"@id\":\"https:\/\/cryptoslate.com\/ether-fi-foils-domain-hijack-attempt-credits-enhanced-security-measures\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/cryptoslate.com\/ether-fi-foils-domain-hijack-attempt-credits-enhanced-security-measures\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/cryptoslate.com\/ether-fi-foils-domain-hijack-attempt-credits-enhanced-security-measures\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/cryptoslate.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Ether.fi foils domain hijack attempt, credits enhanced security measures\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/cryptoslate.com\/#website\",\"url\":\"https:\/\/cryptoslate.com\/\",\"name\":\"CryptoSlate\",\"description\":\"Cryptocurrency News and Real-time Coin Data\",\"publisher\":{\"@id\":\"https:\/\/cryptoslate.com\/#organization\"},\"inLanguage\":\"en-US\"},{\"@type\":\"NewsMediaOrganization\",\"@id\":\"https:\/\/cryptoslate.com\/#organization\",\"name\":\"CryptoSlate\",\"url\":\"https:\/\/cryptoslate.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cryptoslate.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2018\/05\/c-logo.jpg\",\"contentUrl\":\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2018\/05\/c-logo.jpg\",\"width\":1000,\"height\":1000,\"caption\":\"CryptoSlate\"},\"image\":{\"@id\":\"https:\/\/cryptoslate.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/twitter.com\/cryptoslate\",\"https:\/\/www.instagram.com\/cryptoslate\",\"https:\/\/www.linkedin.com\/company\/cryptoslate\",\"https:\/\/www.youtube.com\/c\/cryptoslate\",\"https:\/\/cryptoslate.substack.com\",\"https:\/\/t.me\/cryptoslatenews\",\"https:\/\/www.tiktok.com\/@cryptoslatenews\"],\"publishingPrinciples\":\"https:\/\/cryptoslate.com\/editorial-policy\/#editorial-principles\",\"ownershipFundingInfo\":\"https:\/\/cryptoslate.com\/disclaimers\/how-cryptoslate-makes-and-spends-money\/\",\"correctionsPolicy\":\"https:\/\/cryptoslate.com\/editorial-policy\/#corrections-feedback\",\"ethicsPolicy\":\"https:\/\/cryptoslate.com\/editorial-policy\/#editorial-principles\",\"foundingDate\":\"2017-08-04\",\"founder\":[{\"@type\":\"Person\",\"name\":\"Nate Whitehill\"},{\"@type\":\"Person\",\"name\":\"Matthew Blancarte\"}],\"contactPoint\":[{\"@type\":\"ContactPoint\",\"contactType\":\"customer support\",\"url\":\"https:\/\/cryptoslate.com\/contact\/\",\"availableLanguage\":\"en-US\"},{\"@type\":\"ContactPoint\",\"contactType\":\"sales\",\"url\":\"https:\/\/cryptoslate.com\/advertising\/\",\"availableLanguage\":\"en-US\"},{\"@type\":\"ContactPoint\",\"contactType\":\"newsroom\",\"url\":\"https:\/\/cryptoslate.com\/editorial-policy\/#corrections-feedback\",\"email\":\"tips@cryptoslate.com\",\"availableLanguage\":\"en-US\"}],\"masthead\":\"https:\/\/cryptoslate.com\/about\/#masthead\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/cryptoslate.com\/#\/schema\/person\/3db28ca07ba41170a9d49a2e887d4882\",\"name\":\"Assad Jafri\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cryptoslate.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2022\/02\/cs-syed-150x150.jpg\",\"contentUrl\":\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2022\/02\/cs-syed-150x150.jpg\",\"caption\":\"Assad Jafri\"},\"description\":\"AJ, a passionate journalist since Yemen's 2011 Arab Spring, has honed his skills worldwide for over a decade. Specializing in financial journalism, he now focuses on crypto reporting.\",\"url\":\"https:\/\/cryptoslate.com\/author\/assad-jafri\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Ether.fi foils domain hijack attempt, credits enhanced security measures","description":"Coordinated efforts and advanced safeguards save Ether.fi\u2019s domain from malicious takeover on Sept. 24.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cryptoslate.com\/ether-fi-foils-domain-hijack-attempt-credits-enhanced-security-measures\/","og_locale":"en_US","og_type":"article","og_title":"Ether.fi foils domain hijack attempt, credits enhanced security measures","og_description":"Coordinated efforts and advanced safeguards save Ether.fi\u2019s domain from malicious takeover on Sept. 24.","og_url":"https:\/\/cryptoslate.com\/ether-fi-foils-domain-hijack-attempt-credits-enhanced-security-measures\/","og_site_name":"CryptoSlate","article_published_time":"2024-09-25T18:30:41+00:00","article_modified_time":"2024-09-25T18:08:15+00:00","og_image":[{"width":1200,"height":630,"url":"https:\/\/cryptoslate.com\/wp-content\/uploads\/2024\/09\/hack.jpg","type":"image\/jpeg"}],"author":"Assad Jafri","twitter_card":"summary_large_image","twitter_creator":"@cryptoslate","twitter_site":"@cryptoslate","twitter_misc":{"Written by":"Assad Jafri","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/cryptoslate.com\/ether-fi-foils-domain-hijack-attempt-credits-enhanced-security-measures\/#article","isPartOf":{"@id":"https:\/\/cryptoslate.com\/ether-fi-foils-domain-hijack-attempt-credits-enhanced-security-measures\/"},"author":{"name":"Assad Jafri","@id":"https:\/\/cryptoslate.com\/#\/schema\/person\/3db28ca07ba41170a9d49a2e887d4882"},"headline":"Ether.fi foils domain hijack attempt, credits enhanced security measures","datePublished":"2024-09-25T18:30:41+00:00","dateModified":"2024-09-25T18:30:41+00:00","mainEntityOfPage":{"@id":"https:\/\/cryptoslate.com\/ether-fi-foils-domain-hijack-attempt-credits-enhanced-security-measures\/"},"wordCount":266,"commentCount":0,"publisher":{"@id":"https:\/\/cryptoslate.com\/#organization"},"articleSection":["DeFi","Hacks"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/cryptoslate.com\/ether-fi-foils-domain-hijack-attempt-credits-enhanced-security-measures\/#respond"]}],"copyrightYear":"2024","copyrightHolder":{"@id":"https:\/\/cryptoslate.com\/#organization"}},{"@type":"WebPage","@id":"https:\/\/cryptoslate.com\/ether-fi-foils-domain-hijack-attempt-credits-enhanced-security-measures\/","url":"https:\/\/cryptoslate.com\/ether-fi-foils-domain-hijack-attempt-credits-enhanced-security-measures\/","name":"Ether.fi foils domain hijack attempt, credits enhanced security measures","isPartOf":{"@id":"https:\/\/cryptoslate.com\/#website"},"datePublished":"2024-09-25T18:30:41+00:00","dateModified":"2024-09-25T18:30:41+00:00","description":"Coordinated efforts and advanced safeguards save Ether.fi\u2019s domain from malicious takeover on Sept. 24.","breadcrumb":{"@id":"https:\/\/cryptoslate.com\/ether-fi-foils-domain-hijack-attempt-credits-enhanced-security-measures\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cryptoslate.com\/ether-fi-foils-domain-hijack-attempt-credits-enhanced-security-measures\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/cryptoslate.com\/ether-fi-foils-domain-hijack-attempt-credits-enhanced-security-measures\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cryptoslate.com\/"},{"@type":"ListItem","position":2,"name":"Ether.fi foils domain hijack attempt, credits enhanced security measures"}]},{"@type":"WebSite","@id":"https:\/\/cryptoslate.com\/#website","url":"https:\/\/cryptoslate.com\/","name":"CryptoSlate","description":"Cryptocurrency News and Real-time Coin Data","publisher":{"@id":"https:\/\/cryptoslate.com\/#organization"},"inLanguage":"en-US"},{"@type":"NewsMediaOrganization","@id":"https:\/\/cryptoslate.com\/#organization","name":"CryptoSlate","url":"https:\/\/cryptoslate.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptoslate.com\/#\/schema\/logo\/image\/","url":"https:\/\/cryptoslate.com\/wp-content\/uploads\/2018\/05\/c-logo.jpg","contentUrl":"https:\/\/cryptoslate.com\/wp-content\/uploads\/2018\/05\/c-logo.jpg","width":1000,"height":1000,"caption":"CryptoSlate"},"image":{"@id":"https:\/\/cryptoslate.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/twitter.com\/cryptoslate","https:\/\/www.instagram.com\/cryptoslate","https:\/\/www.linkedin.com\/company\/cryptoslate","https:\/\/www.youtube.com\/c\/cryptoslate","https:\/\/cryptoslate.substack.com","https:\/\/t.me\/cryptoslatenews","https:\/\/www.tiktok.com\/@cryptoslatenews"],"publishingPrinciples":"https:\/\/cryptoslate.com\/editorial-policy\/#editorial-principles","ownershipFundingInfo":"https:\/\/cryptoslate.com\/disclaimers\/how-cryptoslate-makes-and-spends-money\/","correctionsPolicy":"https:\/\/cryptoslate.com\/editorial-policy\/#corrections-feedback","ethicsPolicy":"https:\/\/cryptoslate.com\/editorial-policy\/#editorial-principles","foundingDate":"2017-08-04","founder":[{"@type":"Person","name":"Nate Whitehill"},{"@type":"Person","name":"Matthew Blancarte"}],"contactPoint":[{"@type":"ContactPoint","contactType":"customer support","url":"https:\/\/cryptoslate.com\/contact\/","availableLanguage":"en-US"},{"@type":"ContactPoint","contactType":"sales","url":"https:\/\/cryptoslate.com\/advertising\/","availableLanguage":"en-US"},{"@type":"ContactPoint","contactType":"newsroom","url":"https:\/\/cryptoslate.com\/editorial-policy\/#corrections-feedback","email":"tips@cryptoslate.com","availableLanguage":"en-US"}],"masthead":"https:\/\/cryptoslate.com\/about\/#masthead"},{"@type":"Person","@id":"https:\/\/cryptoslate.com\/#\/schema\/person\/3db28ca07ba41170a9d49a2e887d4882","name":"Assad Jafri","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptoslate.com\/#\/schema\/person\/image\/","url":"https:\/\/cryptoslate.com\/wp-content\/uploads\/2022\/02\/cs-syed-150x150.jpg","contentUrl":"https:\/\/cryptoslate.com\/wp-content\/uploads\/2022\/02\/cs-syed-150x150.jpg","caption":"Assad Jafri"},"description":"AJ, a passionate journalist since Yemen's 2011 Arab Spring, has honed his skills worldwide for over a decade. Specializing in financial journalism, he now focuses on crypto reporting.","url":"https:\/\/cryptoslate.com\/author\/assad-jafri\/"}]}},"_links":{"self":[{"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/posts\/445324"}],"collection":[{"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/users\/1250"}],"replies":[{"embeddable":true,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/comments?post=445324"}],"version-history":[{"count":5,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/posts\/445324\/revisions"}],"predecessor-version":[{"id":445339,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/posts\/445324\/revisions\/445339"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/media\/445325"}],"wp:attachment":[{"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/media?parent=445324"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/categories?post=445324"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/tags?post=445324"},{"taxonomy":"post_folder","embeddable":true,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/post_folder?post=445324"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}