GoDaddy joins the dots and realizes it's been under attack for three years

Web hosting and domain name concern GoDaddy has disclosed a fresh attack on its infrastructure, and concluded that it is one of a series of linked incidents dating back to 2020. The business took the unusual step of detailing the attacks in its Form 10-K – the formal annual report listed entities are required to file in the US …

[Orv]

Re: Bis Später Pater

You're not wrong, but I'm also having trouble thinking of a hosting service and registrar that I'd describe as competent. Dotster bought out a company that had one of my domain names and screwed things up so badly that, five years later, I can still only manage it by filing tickets. Their web control panel can see it but insists I don't own it.

[Pascal Monett]

Green hats, really ?

What about blue hats ? Or grey hats ?

Or hey, it's the latest fashion apparently, rainbow hats ?

Can't be woke if you leave them out, can you ?

This is getting ridiculous.

[Forum McForumface]

Re: Green hats, really ?

I thought green hat referenced a military connection? It’s not unreasonable in that context - well, not to me at least.

Edit: I think I’m wrong about this, and it refers to relative newbies. Oh well. There’s still some utility to the distinction.

[KarMann]

Re: Green hats, really ?

I was guessing it was those who were just in it for the ransom $$$/£££/€€€, but that was very much a guess.

[anonymous boring coward]

Re: Green hats, really ?

Huh?

[Arthur the cat]

Doctor Seuss time

I DO NOT LIKE GREEN HATS AND SPAM.

[IGotOut]

Well...

As there is only one language Putin understands, we should make it legal for all European and NATO nation's to hack Russian and her puppet states as well.

He only see's inaction as a weakness, so if we allow him to do this, then he and his cronies will just escalate it.

[Michael Strorm]

Re: Well...

This has been suggested before, the problem being that it legitimises, normalises and encourages hacking on both sides when that's something that's more in Putin's interests than the West's in this asymmetric scenario.

[Anonymous Coward]

Re: Well...

Can anyone give a good reason why we shouldn't just block all Russian Internet traffic?

[Richard 12]

Re: Well...

We want ordinary Russians to see what Putin is actually doing in their name.

[Anonymous Coward]

Re: Well...

Ordinary Russians are quite happy with Putin as long as they have bread and vodka. Just like the muzhiks were quite happy with the Tsar. Don't forget that Russia is mainly villages and some major cities.

[teknopaul]

Re: Well...

Thing about the truth is it can take a while but it leaks. Lies require a constant watertight blanket. Putin made clever use of lies in the US but he's wrong if he thinks he will beat Wikipedia.

[Version 1.0]

Re: Well...

Can anyone give a good reason why we shouldn't just block all Russian Internet traffic? FTFY so I gave you an upvote.

[Eponymous Bastard]

Purple helmet

I'll get my coat.

[Anonymous Coward]

So they think it's a campaign three years later? Ha!

So funny. My company had websites with them a couple of years ago and one of them got hacked repeatedly. When I investigated I found that someone logged in the admin console from an IP address in El Salvador - which was provided by a Microtik router that had known security issues. Admin credentials were used to login, and the first thing they did was delete or remove all the Sucuri security stuff then they rewrote the website to suit themselves. It was all in the logs plain to see but the Sucuri staff insisted there was a bad plugin or something something. I was able to get our hosting moved off GoDaddy after that.

[Kevin McMurtrie]

Helpless

If only there was some standardized means to inform a network that they have a large number of compromised hosts. Maybe something like a public record, like an AbuseIPDB. Maybe a standardized abuse e-mail contact, but one that doesn't auto-reply with "This email inbox isn't monitored." GoDaddy could have seen a pattern years ago.

P.S. Somebody still needs to convince DigitalOcean that they've been hacked since November 2022.