RECENT PHISHING ATTACK ON THE FAMOUS GODADDY HOSTING SERVICE

In mid-April, GoDaddy discovered suspicious activity on some of its servers. Now they know that this phishing attack occurred longer, and that thousands of usernames and passwords for accessing their clients’ servers were compromised with it.

Hosting service customers were already informed of what happened, specifically this security violation affected more than 28,000 clients of the company. Apparently this latest hack has only affected user login details, as there is no evidence that the files of the compromised accounts have been modified.

The perpetrator of this attack is suspected to have been a single individual, who has already been blocked. It managed to access the login information of the affected clients through an altered SSH or Secure Shell file , which has already been removed from the platform so that it does not affect other accounts.

The web hosting login credentials all affected clients have already been reset, in order to prevent any type of abuse. All those affected were notified via email, and they were advised to be alert for any strange movements.

In this regard, it should be noted that this has not been the only attack that the giant has registered in web hosting in a short time, and it is that last March its network was also violated. In this case, the phishing attack could be carried out when one of its employees was deceived. As a result, it was possible to access and modify some customer records.

In this case, the attacker managed to change the domain configuration , specifically he proceeded to modify the DNS records to point to a web server controlled by unidentified third parties. In some cases the interface was modified, showing some messages out of context.

Currently, numerous hacks are being carried out, and although it is clear that it is not possible to prevent them 100%, it is possible to hinder them with two-factor authentication (2FA), resetting passwords and raising awareness among users. All these aspects are of vital importance. RECENT PHISHING ATTACK ON THE FAMOUS GODADDY HOSTING SERVICE