GoDaddy is now facing yet another security issue .KrebsOnSecurity has found that hackers managed to trick GoDaddy employees into taking ownership or control of several cryptocurrency, thus unwittingly aiding attacks that brought down websites.
It is not certain how many companies were affected by the operation, but Liquid.com and NiceHash reported issues within days of each other. Bibox, Celsius , and Wirex may also have been among the targets, although they have not confirmed anything about this incident so far.
There's not yet enough information about how the hackers pulled it off, but a successful campaign in March against websites like Escrow.com likely relied on "vishing," or voice calls that trick targets into visiting phishing websites designed to collect data. The attackers often try to convince staff that they're from a company's IT department and just want to resolve some technical issues that have arisen.
A GoDaddy spokesperson confirmed that a "small number" of its staff had been victims of "social engineering" attacks that allowed attackers to make unauthorized changes to domains and accounts. However, the company responded by reversing the changes, locking down accounts, and helping victims regain access.
This comes about a year after a data breach that affected 28,000 hosting accounts and damaged GoDaddy’s image. The company has certainly struggled to cope with the attack. GoDaddy, like many other companies, has joined the telework program and its staff is working remotely during the COVID-19. This could make it difficult to verify the legitimacy of a caller or a website. Therefore, this can be a problem for many companies, even when their employees return to their physical workplace.
