3 ms·
Although we all know GoDaddy's subpar, this is massive: > credentials that gave it access to a “small number” of employee accounts and the hosting accounts of
by veqq 4y ago
Although we all know GoDaddy's subpar, this is massive:
> credentials that gave it access to a “small number” of employee accounts and the hosting accounts of roughly 28,000 customers.
> obtain login credentials for WordPress admin accounts, FTP accounts, and email addresses for 1.2 million current and inactive Managed WordPress customers
I'm curious what they concretely did:
> goal is to infect websites and servers with malware for phishing campaigns, malware distribution
> weight loss websites
but hm. I guess I don't know a lot about malware, phishing and stuff. How would you gain exactly?
- Retr0id 4y agoThe short answer is, malware authors will pay you to distribute their malware. If you phish someone and gain access to something, you can sell that access to someone else. The "end" of the chain is things like ransomware, identity theft, cc fraud, etc.
- inetknght 4y ago> The "end" of the chain is things like ransomware, identity theft, cc fraud, etc. Nah. The "end" of the chain is espionage, industrial or otherwise.
- zdragnar 4y agoThat sort of thing tends to involve much more individually targeted attacks- emails, fake ads on Facebook targeted to a specific email address, etc. Throwing up a fake weight loss website to infect uncle bob's boob viewing machine isn't going to get very far in the espionage game.
- Godel_unicode 4y agoThere are chains which end in espionage, but the volume pales compared to ransomware, identity theft, and carding. Too much money to be made.