There you have it! Name.com says 15 customer domains were redirected on Oct. 30 and 31 in an atta…
November 1, 2026 · 0 likes · 0 comments
AI Cybersecurity
There you have it! Name.com says 15 customer domains were redirected on Oct. 30 and 31 in an attack on decentralized finance websites, and all 15 are now restored.
Full story on Unbiased Headlines: https://lnkd.in/eQQ9D_S8
What the reporting says, as of 11:50 PM ET, Oct. 31:
Visitors typed familiar DeFi addresses and landed on lookalike pages loading Step Drainer, a kit built to trick people into approving wallet transactions they never meant to authorize. Security firm Blockaid flagged at least 12 DeFi sites. The Block traced about $138,000 stolen to three wallets on EVM chains, not counting Solana or Aptos losses, which haven't been quantified.
The smart contracts were untouched. Users lost money anyway, because the website layer was hijacked.
Step Drainer is sold as a service. LevelBlue SpiderLabs documented it supporting more than 20 blockchain networks, with a reported $750 source-code package. Whoever ran this didn't need to build anything.
Still open: nobody has said how the attackers got in. A shared registrar doesn't by itself show Name.com's systems were breached, and neither Name.com nor Vercel has been established as the point of compromise. No attacker has been identified.
Switching from the reporting to my own opinion now:
I believe hacks like this are going to increase, and fast. Code is law, until someone owns the address bar. Most of the internet still runs on registrar logins, DNS records and passwords, and that plumbing is the soft spot.
I also believe we'll see more zero-days, not fewer. On speed, I'm not guessing: Anthropic's Frontier Red Team reported an unreleased model went from a Linux bug to a root shell in under an hour in its testing. Every one of those flaws was disclosed and patched. Who do you think won't be so polite?
In my opinion, critical infrastructure risk is at an all-time high. Our national cybersecurity posture is not where it needs to be, and government still can't hire or keep the talent it needs, at the exact moment AI is collapsing the time it takes to find and exploit a weakness. Water, power, hospitals all sit on the same ordinary credentials this attack went after.
What I'd do today:
• Turn on two-factor authentication on every registrar and DNS account. Name.com told customers to do exactly that.
• Revoke wallet approvals you don't recognize.
• Use agents to watch your DNS and patch in hours, not months.
Defenders have to be right every time. The attackers' toolkit reportedly starts at $750.
Full story, just the facts: https://lnkd.in/eQQ9D_S8
Full story on Unbiased Headlines: https://lnkd.in/eQQ9D_S8
What the reporting says, as of 11:50 PM ET, Oct. 31:
Visitors typed familiar DeFi addresses and landed on lookalike pages loading Step Drainer, a kit built to trick people into approving wallet transactions they never meant to authorize. Security firm Blockaid flagged at least 12 DeFi sites. The Block traced about $138,000 stolen to three wallets on EVM chains, not counting Solana or Aptos losses, which haven't been quantified.
The smart contracts were untouched. Users lost money anyway, because the website layer was hijacked.
Step Drainer is sold as a service. LevelBlue SpiderLabs documented it supporting more than 20 blockchain networks, with a reported $750 source-code package. Whoever ran this didn't need to build anything.
Still open: nobody has said how the attackers got in. A shared registrar doesn't by itself show Name.com's systems were breached, and neither Name.com nor Vercel has been established as the point of compromise. No attacker has been identified.
Switching from the reporting to my own opinion now:
I believe hacks like this are going to increase, and fast. Code is law, until someone owns the address bar. Most of the internet still runs on registrar logins, DNS records and passwords, and that plumbing is the soft spot.
I also believe we'll see more zero-days, not fewer. On speed, I'm not guessing: Anthropic's Frontier Red Team reported an unreleased model went from a Linux bug to a root shell in under an hour in its testing. Every one of those flaws was disclosed and patched. Who do you think won't be so polite?
In my opinion, critical infrastructure risk is at an all-time high. Our national cybersecurity posture is not where it needs to be, and government still can't hire or keep the talent it needs, at the exact moment AI is collapsing the time it takes to find and exploit a weakness. Water, power, hospitals all sit on the same ordinary credentials this attack went after.
What I'd do today:
• Turn on two-factor authentication on every registrar and DNS account. Name.com told customers to do exactly that.
• Revoke wallet approvals you don't recognize.
• Use agents to watch your DNS and patch in hours, not months.
Defenders have to be right every time. The attackers' toolkit reportedly starts at $750.
Full story, just the facts: https://lnkd.in/eQQ9D_S8