Security emails from Moniker? WTF ??

[sarettah]

So, I get 3 emails from moniker telling me about new security stuff and to go reset passwords, etc. No links to click, tells me to go to Moniker.com.

Only thing is, as far as I know, I don't have a moniker account.

The 3 emails came to 3 addresses that I have associated with various godaddy accounts.

So, as I said in the thread title WTF?

This is very strange.

So, I go to moniker.com and ask for a retrieval of the password for one of the email addresses. The one I used was only ever used on godaddy. Moniker found and sent me back the account number associated with the email address.

So, I do a change of password and then login.

There are no domains in the account. The account info is the exact info associated with the godaddy account that has that address. Login history only shows the login history from today, no other history.

So, I am very confused by this. Surely Moniker isn't phishing against godaddy accounts or something?

What am I missing here.

.

[Konda]

They were hacked and disabled everyone's passwords as a precaution.
I go the email for all my Moniker accounts.

Did you use SnapNames in the past? It could be they got your account from there as they took over a few years ago.

[CYF]

Moniker has too many problems lately. Can't login, can't renew domains, trouble accessing the registry, downtime.... I reset my password and immediately started to transfer the last of my domains out of there.

[baddog]

We got one of those to an addy that we would not normally use, but may have input because they were such a PITA to work with. Few things have made me as happy as finally getting my sites away from them.

[iv@n]

I got emails too, that's weird

[Klen]

I got two mails as well.Nothing weird in that,even i dont have any domains left there,account is still alive.

[suesheboy]

Got 3 emails and assume my clients did as well.

[thumbuilderic]

Originally Posted by sarettah

So, I get 3 emails from moniker telling me about new security stuff and to go reset passwords, etc. No links to click, tells me to go to Moniker.com.

Only thing is, as far as I know, I don't have a moniker account.

The 3 emails came to 3 addresses that I have associated with various godaddy accounts.

So, as I said in the thread title WTF?

This is very strange.

So, I go to moniker.com and ask for a retrieval of the password for one of the email addresses. The one I used was only ever used on godaddy. Moniker found and sent me back the account number associated with the email address.

So, I do a change of password and then login.

There are no domains in the account. The account info is the exact info associated with the godaddy account that has that address. Login history only shows the login history from today, no other history.

So, I am very confused by this. Surely Moniker isn't phishing against godaddy accounts or something?

What am I missing here.

.

I got it as well. Not a phishing attempt - it's valid *unfortunately*

[BlackCrayon]

moniker has gone to utter crap since key systems bought them. they outsourced all their support and always seem to have some kind of issue.

[Google Expert]

Moniker is fucked.

[Bravo]

moniker make me crazy ;(
I did requested actions at 4 accounts and forgot secret answer at 5th ;(
20 min waiting on phone when calling them sucks

[Denny]

Originally Posted by alextm

moniker make me crazy ;(
I did requested actions at 4 accounts and forgot secret answer at 5th ;(
20 min waiting on phone when calling them sucks

Same here. Moniker sucks, have only two domains there.

[Fat Panda]

figured it was a phishing attempt

[Babaganoosh]

It cracks me up that so many people had domains at moniker just because there was a hot chick who would talk to you there.

Suckers.

[sarettah]

Originally Posted by Babaganoosh

It cracks me up that so many people had domains at moniker just because there was a hot chick who would talk to you there.

Suckers.

As far as I know, I have never opened an account at moniker. I might have had 1 snapnames account from a domain purchase a few years back.

The emails I got were definitely based on info from GoDaddy not info that I gave to Moniker. The contact info on account was only entered in GoDaddy. It is an account that I maintain for a client. I purchased the domains for the client and then created an account for them so I could push the domains to them. The email address is one I created just for that purpose. It has never been used for anything else.

So it appears that either:

1. GoDaddy has shared info with Moniker for some reason

or

2. Moniker (or someone on their behalf) has stolen info from Go Daddy.

.

[TheDA]

Can someone copy the body of the email for me please. What are Moniker asking us to do. I am locked out of my accounts and can't do a password retrieval at the moment.

[Jim_Gunn]

I have half my domains at Moniker and I received the email. I didn't follow the link and went straight to the site just to be safe and tried to reset my password, but I have not yet received the new password email a couple of hours later.

[CYF]

Originally Posted by Babaganoosh

It cracks me up that so many people had domains at moniker just because there was a hot chick who would talk to you there.

Suckers.

Moniker used to be quite good back in the day.

[bean-aid]

Did you ask enough questions?

[PhoneSexKing]

That'll teach them to not enforce 2FA...

[TrashyGirl]

(copied from email from Moniker)

Moniker?s Operations & Security team has discovered and blocked suspicious activity on the Moniker network that appears to have been a coordinated attempt to access a number of Moniker user accounts.

As a precaution to protect your domains, we have decided to implement a system-wide password reset. Please read the below instructions to create a new password. You will not be able to access your Moniker account until these steps are taken.

In our security investigation, we have found no evidence that domains have been lost or transferred out. We also have no evidence that any confidential or credit card information has been compromised.

While our password encryption measures are robust, we are taking additional steps to ensure that your personal data and domains remain secure. This means that, to be absolutely sure of the security of your account, we are requiring all users to reset their Moniker account passwords.
Please reset your password by following the directions below.

1) Go to Moniker.com and click the ?Sign In? button in the upper right hand corner of the home page. Select the ?Forgot Your Password? link.


2) You will be directed to a page to ?Retrieve? your Moniker Account Password. When prompted, enter your account number and click ?Submit?.


3) You will be directed to a page that displays the message below. You will receive an email from Moniker. Please follow the instructions in this email to complete the password reset.

As recent events with other large services have demonstrated, this type of activity is becoming more common. We take our responsibility to keep your domains and personal data safe very seriously, and we're constantly enhancing the security of our service infrastructure to protect our customers. We feel it is also important to be clear that we view this as attempted illegal activity and have taken steps to report this to the appropriate authorities.

There are also several important steps that you can take to ensure that your data on any website, including Moniker, is secure:
? Avoid using simple passwords based on dictionary words
? Never use the same password on multiple sites or services
? Never click on 'reset password' requests in emails that you did not request

Thank you for taking the time to read this email. We sincerely apologize for the inconvenience of having to change your password, but, ultimately, we believe this simple step will result in a more secure experience. If you have any questions, please do not hesitate to contact Moniker Support. Our support team is standing by to assist at 800-688-6311 or outside the U.S. and Canada: 954-607-1294.

(note, there was no way to click from the email that I received so it didn't appear to be a phishing email, I merely went to my account and requested a password reset, the password reset email arrived immediately)

[sarettah]

Originally Posted by beaner

Did you ask enough questions?

This is one of the times when I don't even know what to ask other than WTF ?

.

[TheDA]

Originally Posted by TrashyGirl

(copied from email from Moniker)

Moniker?s Operations & Security team has discovered and blocked suspicious activity on the Moniker network that appears to have been a coordinated attempt to access a number of Moniker user accounts

Thanks. Not sure if my account has been compromised or not.

Both the email address and phone number that they have on account for me are inaccessible by me(my fault), so they are going to mail details out to me instead.

A less than satisfactory outcome.

Customer support last night was dreadfully bad. Maybe time for a move.

[Denny]

Originally Posted by TheDA

Thanks. Not sure if my account has been compromised or not.

Both the email address and phone number that they have on account for me are inaccessible by me(my fault), so they are going to mail details out to me instead.

A less than satisfactory outcome.

Customer support last night was dreadfully bad. Maybe time for a move.

martij (at) corp.moniker.com - I had a problem resetting my PW, that guy helped me.

[TheDA]

Originally Posted by Denny

martij (at) corp.moniker.com - I had a problem resetting my PW, that guy helped me.

Thanks. I'll give it a try.

[turt_t]

Thanks!!!

Originally Posted by Denny

martij (at) corp.moniker.com - I had a problem resetting my PW, that guy helped me.