Posts

GoDaddy says a multi-year breach hijacked customer websites and accounts

Image
  Three breaches over as many years all carried out by the same threat actor. GoDaddy, one of the world’s largest domain registrars, has confirmed that its network has been the victim of a sophisticated and sustained attack by unknown attackers over multiple years, resulting in the theft of company source code, customer and employee login credentials, and the installation of malware that redirected customer websites to malicious sites. The company has nearly 21 million customers and generated revenue of almost $4 billion in 2022, making it one of the most popular domain registrars globally. However, despite its popularity, the company has faced several security incidents in recent years, leading to concerns about its cybersecurity practices. In a filing with the Securities and Exchange Commission (SEC), the company reported three serious security events that started in 2020 and lasted through 2022 and were carried out by the same intruder. The most recent event occurred in December...

Hackers stole data center logins for Apple, Microsoft, and many more

Around 2,000 companies, including China's foreign exchange platform, that use two data centers in Asia are reportedly affected by a recent hack. The primary data centers run by GDS Holdings in Shanghai and ST Telemedia Global Data in Singapore have had their login credentials for customer support websites stolen, with at least five of these websites being accessed by hackers. The stolen login credentials have been in the hackers' possession for over a year, but were recently offered for sale for $175,000 in January 2023. The hackers have confirmed that some of the stolen credentials work, but have been unable to handle the volume of logins, saying "But unable to handle as total number of companies is over 2,000." As a response to the hack, the data centers have forced password changes on all of their customers at the start of the year. The affected companies include tech giants such as Apple, Microsoft, and Amazon, as well as financial institutions such as Alibaba, Go...