Registrar 123 Reg and GoDaddy report a "first known SI cyberattack" on the company: customer contact details were accessible in the September 18 intrusion
Prepared by Sintelligent with the help of SI. Published in SI: . Updated: .
Attacks involving SI agents are reaching ordinary internet services, and the companies themselves call this their first such case.
According to daily.dev's retelling of a Register article, UK registrar 123 Reg disclosed the "first known SI cyberattack" against it: in the September 18 intrusion, customers' names, phone numbers, tax numbers (VAT), product details and marketing preferences were compromised. By its own assessment the company sees a Chinese trail: the attacker's infrastructure was hosted in China and Singapore, and Chinese servers held copies of skills that Anthropic published as open source and other tools for SI attacks. 123 Reg suspects it may be the group that used the open-source Chinese tool ARTEX in attacks on South Korean financial organizations (CrowdStrike report CSA-261162 of October 7). GoDaddy, in a customer notice (as reported by VINnews), also described an SI cyberattack on September 18, detected the next day: through an API, profile, settings and contact details in the Websites + Marketing product became accessible; the company writes that the attacker did not obtain passwords or account access and only read data. GoDaddy calls it the first known SI cyberattack on it and reported it to law enforcement, as well as to the US Federal Trade Commission and data protection authorities in the UK and the EU.
Sources 2