> WTF is this "urgent"? How might this affect "all internet users"? Suppose you have a domain registered with Namecheap (or really anyone). You've reused your

> WTF is this "urgent"? How might this affect "all internet users"? Suppose you have a domain registered with Namecheap (or really anyone). You've reused your password and the attackers get into your account at the registrar. What does that get them? First they change the MX record for your domain. Immediately they're receiving all your email. Now that they control your email they can get a domain-validated certificate for your domain. Then they can change all your other DNS records to point at their servers and operate them with valid TLS certificates and MITM all the connections to your real servers. Then they can collect all the credentials of users using your website including the administrative credentials that allow them to compromise your real servers. Now they have all your data and your users' data and your password database and your website is hosting malware. There are very few things more compromising to large numbers of people than attackers quietly getting control of multiple legitimate active domains.