WHAT HAPPENED
We recently discovered on October 15, 2024 that our marketing website (stably.io) was compromised since October 11. During this period, some visitors to our website were prompted to download a malware “Terms of Service” PDF file that is not officially from Stably. Our team is still currently investigating the root cause of this attack, but our preliminary research indicates that mostly Windows desktop visitors were affected. However, we cannot be certain that other platforms were not impacted.
Please note that no sensitive Stably customer data was affected by this incident since we do not store this information on our marketing website. Additionally, our products and services (e.g., Stably Ramp), which are hosted separately from our marketing website, were not affected. All Stably products and services remain secure and fully operational.
WHAT WE HAVE DONE
Upon the discovery, we immediately restored our website to a clean backup version from before October 11. We also implemented additional protective measures to secure our site, including replacing all site admins, credentials, and removing Wordpress plugins that could pose potential security issues.
WHAT YOU CAN DO
As a precautionary measure, if you visited stably.io between October 11-15, please check your device(s) to make sure no malware files were downloaded. If you have downloaded it or are unsure, please immediately take the following actions:
Run a security scan to remove threats: Use trusted antivirus or antimalware programs/apps to scan your device(s) for any potential threats. If the malware or other threats are identified (or if you know where they are), delete and remove them permanently.
Change your passwords and wallets: If you’ve interacted with any accounts, wallets, or sensitive data during this period, update your passwords and consider rotating your wallets on an unaffected device, if necessary.
Reset your device: For additional security, consider performing a factory reset of your device(s) to further mitigate potential threats.
Update your security software: Ensure that your antivirus software and operating system are fully updated to protect against future vulnerabilities.
We regret this incident and would like to reassure you that Stably is always fully committed to safeguarding customer data and ensuring the overall security of our platforms. We are taking necessary steps to address this incident, and we will keep you updated as our investigation continues.
Sincerely,
Stably Team