Home / News

Security Lapses Lead to Squarespace Domain Hijacks

BLACK FRIDAY DISCOUNT - CircleID x NordVPN
Get NordVPN  [74% +3 extra months, from $2.99/month]

At least a dozen organizations experienced domain hijacks through the domain registrar Squarespace last week. The incidents, occurring between July 9 and July 12, primarily affected cryptocurrency businesses such as Celer Network, Compound Finance, Pendle Finance, and Unstoppable Domains. Hackers exploited a vulnerability in the domain migration process from Google Domains to Squarespace, allowing them to take control of domains by simply registering an email associated with unclaimed domains.

Assumption enabled hijacks: Brian Krebs, a renowned security researcher, highlighted that the root of the problem lies in Squarespace’s assumption that users would use social logins rather than email logins during the migration. This oversight enabled malicious actors to create accounts with emails tied to recently migrated domains before legitimate users did. The lack of required email verification further exacerbated the issue, granting unauthorized access to the domains.

Experts urge action: Security experts from Metamask and Paradigm identified these vulnerabilities and recommended urgent measures for Squarespace users to secure their accounts, including enabling multi-factor authentication and removing unnecessary user accounts. The breach has raised concerns about the overall security and monitoring capabilities provided by Squarespace, prompting calls for better user control and transparency. Squarespace has yet to respond publicly to the breach or the recommendations provided by security experts.

By CircleID Reporter

CircleID’s internal staff reporting on news tips and developing stories. Do you have information the professional Internet community should be aware of? Contact us.

Visit Page

Filed Under

Comments

Comment Title:

  Notify me of follow-up comments

We encourage you to post comments and engage in discussions that advance this post through relevant opinion, anecdotes, links and data. If you see a comment that you believe is irrelevant or inappropriate, you can report it using the link at the end of each comment. Views expressed in the comments do not represent those of CircleID. For more information on our comment policy, see Codes of Conduct.

CircleID Newsletter The Weekly Wrap

More and more professionals are choosing to publish critical posts on CircleID from all corners of the Internet industry. If you find it hard to keep up daily, consider subscribing to our weekly digest. We will provide you a convenient summary report once a week sent directly to your inbox. It's a quick and easy read.

Related

Topics

DNS

Sponsored byDNIB.com

Threat Intelligence

Sponsored byWhoisXML API

Brand Protection

Sponsored byCSC

Cybersecurity

Sponsored byVerisign

Domain Names

Sponsored byVerisign

IPv4 Markets

Sponsored byIPv4.Global

New TLDs

Sponsored byRadix