GoDaddy joins the dots and realizes it's been under attack for three years Web hosting and domain name concern GoDaddy has disclosed a fresh attack on its infrastructure, and concluded that it is one of a series of linked incidents dating back to 2020. The business took the unusual step of detailing the attacks in its Form 10-K – the formal annual report listed entities are required to file in the US …
GoDaddy is unsure of the root cause of the incident...
Oh, allow me: your negligence - monumental negligence in your duty of care to your customers and, by extension, the users of their services.
Bad for any company, regarding IT security. For a tech company with a focus on inter-networking services that should be terminal.
Bad Daddy, bad! You may Go now.
You're not wrong, but I'm also having trouble thinking of a hosting service and registrar that I'd describe as competent. Dotster bought out a company that had one of my domain names and screwed things up so badly that, five years later, I can still only manage it by filing tickets. Their web control panel can see it but insists I don't own it.
So funny. My company had websites with them a couple of years ago and one of them got hacked repeatedly. When I investigated I found that someone logged in the admin console from an IP address in El Salvador - which was provided by a Microtik router that had known security issues. Admin credentials were used to login, and the first thing they did was delete or remove all the Sucuri security stuff then they rewrote the website to suit themselves. It was all in the logs plain to see but the Sucuri staff insisted there was a bad plugin or something something. I was able to get our hosting moved off GoDaddy after that.
If only there was some standardized means to inform a network that they have a large number of compromised hosts. Maybe something like a public record, like an AbuseIPDB. Maybe a standardized abuse e-mail contact, but one that doesn't auto-reply with "This email inbox isn't monitored." GoDaddy could have seen a pattern years ago.
P.S. Somebody still needs to convince DigitalOcean that they've been hacked since November 2022.
The Register 
Biting the hand that feeds IT
Copyright. All rights reserved © 1998–2023
