6 ms·
GoDaddy says a multi-year breach hijacked customer websites and accounts
- veqq 4y agoAlthough we all know GoDaddy's subpar, this is massive: > credentials that gave it access to a “small number” of employee accounts and the hosting accounts of roughly 28,000 customers. > obtain login credentials for WordPress admin accounts, FTP accounts, and email addresses for 1.2 million current and inactive Managed WordPress customers I'm curious what they concretely did: > goal is to infect websites and servers with malware for phishing campaigns, malware distribution > weight loss websites but hm. I guess I don't know a lot about malware, phishing and stuff. How would you gain exactly?
- Retr0id 4y agoThe short answer is, malware authors will pay you to distribute their malware. If you phish someone and gain access to something, you can sell that access to someone else. The "end" of the chain is things like ransomware, identity theft, cc fraud, etc.
- inetknght 4y ago> The "end" of the chain is things like ransomware, identity theft, cc fraud, etc. Nah. The "end" of the chain is espionage, industrial or otherwise.
- zdragnar 4y agoThat sort of thing tends to involve much more individually targeted attacks- emails, fake ads on Facebook targeted to a specific email address, etc. Throwing up a fake weight loss website to infect uncle bob's boob viewing machine isn't going to get very far in the espionage game.
- Godel_unicode 4y agoThere are chains which end in espionage, but the volume pales compared to ransomware, identity theft, and carding. Too much money to be made.
- iambateman 4y agoThe article reads like a press release more than journalism. Multiple uses of the word “sophisticated” as if the only way someone could gain access to Godaddy for _multiple years_ was if they are quite sophisticated, and not as a result of massive negligence on the part of Godaddy itself. No quotes from the company apologizing. Godaddy is wild…what a mess.
- sergers 4y agoHad a similar sentiment. Surprised they didn't come out with government state sponsored actors... Ex china, Russia , and North Korea lol(remember that excuse from sony).
- Godel_unicode 4y agoSony was hacked by the North Koreans according to the FBI. Edit: to be clear, this is in no way far-fetched. Sony had terrible security and North Korea has a credible hacking capability. They mostly use it for ransomware to make cash so they can avoid sanctions, which is right in line with the activity there. https://www.fbi.gov/news/press-releases/update-on-sony-investigation https://www.fbi.gov/news/press-releases/update-on-sony-inves...
- someonenice 4y ago>> a misconfigured domain name system service at GoDaddy allowed hackers to hijack dozens of websites owned by Expedia, Yelp, Mozilla, and others.. Any idea what was the impact on Mozilla ? Did it impact the Firefox and plugin servers ?
- paranoidrobot 4y agoI can't speak for Mozilla, but I wouldn't be surprised to see GoDaddy and others used for non-core stuff. The registrar for mozilla.org is MarkMonitor. I'd guess that most (if not all) of their big name/public facing domains are done through MarkMonitor. Domains used for testing or marketing purposes might be done through GoDaddy and others. This is a fairly common pattern.
- MonkeyMalarky 4y agoCustomer websites being hijacked and going unnoticed for years is incredible levels of incompetent.
- jpleger 4y agoMulti year breaches and general incompetence are kind of Godaddy’s MO. I remember doing notifications of suspicious activity to them and they never bothered even trying to fix it. I would be shocked if they weren’t running afoul of GDPR required notifications by intentionally putting their heads in the sand and pretending no PII was stolen.
- insane_dreamer 4y agoI find it hard to believe that GoDaddy is still in business. Even 15-20 years ago it felt like it operated barely above scam-level and to be avoided.
- TedDoesntTalk 4y agoStill more than $4b in annual revenue!
- xmprt 4y agoThat and their "sex sells" approach to marketing in the past has put me off using them.
- insane_dreamer 4y agome too, though Danica raised the profile of women in NASCAR which is a good thing
- hirako2000 4y agoWhen small businesses adopted the web for their own little site, godaddy grab the opportunity and exploded. It's not like demand is fading, despite social media platform offering decent storefront for even less money and effort. People want $9 monthly turnkey website, they end up paying more but the hook works.
- deleted 4y ago[deleted]
- dang 4y agoGoDaddy: Hackers stole source code, installed malware in multi-year breach - https://news.ycombinator.com/item?id=34838251 https://news.ycombinator.com/item?id=34838251 - Feb 2023 (74 comments)
- cyanydeez 4y agoMarginally worse than GoDaddy service