alert Epik Had A Major Breach

[DaveX]

Just read this. Looks like Epik may have been hacked and sensitive data compromised...

Read here:
https://domainnamewire.com/2021/09/14/hackers-claim-significant-epik-breach/

Thought I would share this.

 

[Samer]

@Beezy,

The man posted here, while, not obligatory, -fact one could argue, people like you, will see negative all his posts —regardless substance.
It seems you are seeing nefarious actions that are not there. Rob is more trustworthy than any other Ceo, since he u kno“actually posted”amazing thing, posted before, & still more after

Once more, i would like to take the opportunity, to thank @Rob Monster for actually replying.

Samer

 

[blockhead]

Rob is more trustworthy than any other Ceo, since he u kno“actually posted”

Lol, wut tf?

Such an absurd statement that doesn't jibe with reality in the slightest.

I'm having to spend my day changing passwords on dozens of accounts because of R.M.'s shitshow, and here you are fanboying as usual. Get a grip dude.

 

[Jurgen Wolf]

When I see "123" and "toor" passwords of admins and even in plain text - I have no comments, Swiss bank of domains.

 

[bmugford]

When I see "123" and "toor" passwords of admins and even in plain text - I have no comments, Swiss bank of domains.

It seems more like the Swiss cheese of cybersecurity, with all the holes in it.

Brad

 

[eternaldomains]

At this point even 2FA or whatever won't help since anyone can just screw around using the admin accounts.

 

[blockhead]

Will be interesting to learn more about a potential 2020 hack, and if it was something that should have been disclosed to customers.


Some pretty serious info in the leak is coming to light now

 

[bmugford]

I wonder how Visa, Mastercard, Amex, and other payment processors feel about this practice?


Panic! in the Discord
@discord__panic

Anyone know who to report Epik to for PCI compliance? They have unencrypted credit card numbers, billing addresses, and CVVs in their databases..

7:21 PM · Sep 17, 2021

 

[bmugford]

Very interesting...

I am also sure the DOJ and FBI will absolutely love information about their investigation and subpoenas being revealed in this data breach.

Brad

 

[Grilled]

https://twitter.com/x/status/1439676897592430593

..

 

[Grilled]

Very interesting...

I am also sure the DOJ and FBI will absolutely love information about their investigation and subpoenas being revealed in this data breach.

Brad

https://twitter.com/x/status/1361443144064143361

...

https://twitter.com/x/status/1438572554877382665

...

https://twitter.com/x/status/1438573018276667403

...

https://twitter.com/x/status/1438573169535762433

...

https://twitter.com/x/status/1438573169535762433

...

https://twitter.com/x/status/1438574212315234312

...

https://twitter.com/x/status/1438576570202005510

 

[bmugford]

https://twitter.com/x/status/1361443144064143361

...

https://twitter.com/x/status/1438576570202005510

Some absolutely bonkers stuff.

Brad

 

[eternaldomains]

This extreme incompetence is the last straw for me. I'm quite dependent on Epik because this is the only registrar I know of that has both crypto payouts and domain tasting, but it's pointless if it's going to burn like this. Got many new regs there so I'm stuck for a while.

Currently I'll be initiating Masterbucks withdrawals in small batches. Will let you all know if it's all successful or not.

 

[Grilled]

Some absolutely bonkers stuff.

Brad

https://twitter.com/x/status/1438608857887035394

 

[Grilled]

Very interesting...

I am also sure the DOJ and FBI will absolutely love information about their investigation and subpoenas being revealed in this data breach.

Brad

I searched epik + maga.host (thanks to the now deleted screenshot) and stumbled upon:

https://krebsonsecurity.com/2021/01/hamas-may-be-threat-to-8chan-qanon-online/

I don't quite understand the article or comprehend the below graph. I added highlights to the red dot sections, as Weev, Anonymize, BitMItigate, Maga.Host are all topics that's been brought up in this thread.

 

[jmcc]

I don't quite understand the article or comprehend the below graph.

It seems like a graph of websites hosted on various IP addresses. The article deals with problematic IP ranges and companies. US citizens and businesses are not legally allowed to trade with some designated organisations or individuals.

Regards...jmcc

 

[JordanH]

Seeing all this was having me transfer my domains out of epik today. Only to realise their website no longer loads.

 

[karmaco]

Is there some reason we can’t approve our own transfers?

 

[blockhead]

I think I remember it being said that you have to contact Epik support to approve the transfer-outs now.


Edit: quote added

I emailed EPIK support, and they replied with the following:

======================================================
For security reasons, domain transfer approval has been disabled.

If you may provide us your Epik Account PIN # as well as the 2 domains, we'll get this done for you.
=====================================================

So I provided the information they requested. Hope they can move the transfers along ASAP.

 

[JordanH]

I think I remember it being said that you have to contact Epik support to approve the transfer-outs now.

Seriously? That's shady.

 

[mr-x]

Really serious domainers use platforms like https://www.internetx.com/en/domains/become-a-reseller/

What are their prices?