<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">fyi. lg<br class=""><div><br class=""><blockquote type="cite" class=""><div class="">Anfang der weitergeleiteten Nachricht:</div><br class="Apple-interchange-newline"><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;" class=""><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif; color:rgba(0, 0, 0, 1.0);" class=""><b class="">Von: </b></span><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif;" class="">RIPE NCC Security <<a href="mailto:security@ripe.net" class="">security@ripe.net</a>><br class=""></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;" class=""><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif; color:rgba(0, 0, 0, 1.0);" class=""><b class="">Betreff: </b></span><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif;" class=""><b class="">[ripe-list] Attack on RIPE NCC Access - Please Enable Two-Factor Authentication</b><br class=""></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;" class=""><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif; color:rgba(0, 0, 0, 1.0);" class=""><b class="">Datum: </b></span><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif;" class="">18. Februar 2021 um 16:43:33 MEZ<br class=""></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;" class=""><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif; color:rgba(0, 0, 0, 1.0);" class=""><b class="">An: </b></span><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif;" class=""><a href="mailto:ripe-list@ripe.net" class="">ripe-list@ripe.net</a><br class=""></span></div><br class=""><div class=""><div class="">Dear colleagues,<br class=""><br class="">Last weekend, RIPE NCC Access, our single sign-on (SSO) service was<br class="">affected by what appears to be a deliberate ‘credential-stuffing’<br class="">attack, which caused some downtime. We mitigated the attack, and we are<br class="">now taking steps to ensure that our services are better protected<br class="">against such threats in the future.<br class=""><br class="">Our preliminary investigations do not indicate that any SSO accounts<br class="">have been compromised. If we do find that an account has been affected<br class="">in the course of our investigations, we will contact the account holder<br class="">individually to inform them.<br class=""><br class="">We would like to ask you to enable two-factor authentication on your<br class="">RIPE NCC Access account if you have not already done so to ensure that<br class="">your account is secure. In general, using two-factor authentication<br class="">across all your accounts can help limit your exposure to such attacks.<br class=""><br class="">We will keep you informed about any relevant developments. If you have<br class="">noticed any suspicious activity in your RIPE NCC Access account, please<br class="">contact us immediately at <a href="mailto:security@ripe.net" class="">security@ripe.net</a>.<br class=""><br class="">Best regards,<br class=""><br class="">Ivo Dijkhuis<br class="">Senior Information Security Officer,<br class="">RIPE NCC<br class=""></div></div></blockquote></div></body></html>