GoDaddy confirms some of its staff fell for a social engineering scam, after hackers changed the email and DNS records for a number of crypto trading platforms
Fraudsters redirected email and web traffic destined for several cryptocurrency trading platforms over the past week.
Krebs on Security Brian Krebs
Related Coverage
- GoDaddy employees tricked into handing over control of cryptocurrency domains SiliconANGLE · Duncan Riley
- GoDaddy employees accidentally helped hackers mess with cryptocurrency sites Mashable · Alex Perry
- Bitcoin Daily: Germany's Finance Minister Says He's Against Private Cryptos; Scam Used GoDaddy Employee Emails To Target Crypto Services PYMNTS.com
- GoDaddy Employees Tricked Into Transferring Control of Crypto Firm Domains: Report CoinDesk · Kevin Reynolds
- Hackers Take Over Bitcoin Exchange and Miner Domain Trustnodes
- Cybercriminals attack GoDaddy-based cryptocurrency platforms Cointelegraph · Husayn Hashim
- Hackers tricked GoDaddy into helping attacks on cryptocurrency services Engadget · Jon Fingas
- Attackers Dupe GoDaddy Staff Into Helping Them Take Down Cryptocurrency Services Gizmodo · Alyse Stanley
- Email and Web Traffic Redirected for Multiple Cryptocurrency Sites After GoDaddy Attack Slashdot · EditorDavid
Discussion
-
@woodyatpch
Bill Woodcock
on x
I don't know how many times this needs to happen before people understand that registrars will always be the weak point in this chain, and that you can't secure millions or billions of dollars with a $9.95 link in the chain. DNSSEC/DANE in-band validation is necessary. https://tw…
-
@lapierrelafitte
Pierre Lafitte
on x
You are never safe. Stay paranoid. https://twitter.com/...
-
@koenrh
Koen Rouwhorst
on x
Still relevant: https://blendle.engineering/ ... This attack vector is entirely preventable: 1. Transfer your business-critical domain names to a registrar that has experience protecting high-value domain names (MarkMonitor, CSC, Cloudflare). 2. Ask them to turn on registry locks…
-
@mdudas
Mike Dudas
on x
Social engineering attack against @GoDaddy employees impacts crypto platforms @Liquid_Global + @NiceHashMining. Other firms potentially impacted include @Bibox365, @CelsiusNetwork & @wirexapp. https://krebsonsecurity.com/ ...
-
@briankrebs
@briankrebs
on x
Exclusive: Fraudsters changed the email and DNS records for a number of cryptocurrency trading platforms this week, after successfully social engineering employees at GoDaddy, the world's largest domain name registrar. https://krebsonsecurity.com/ ... https://twitter.com/...
-
@quinnypig
Corey Quinn
on x
No daddy. https://twitter.com/...
-
@stilgherrian
@stilgherrian
on x
It's always DNS... https://twitter.com/...
-
@film_girl
Christina Warren
on x
Holy shit. Of all the people you don't want social engineered into doing bad stuff it's the people that control access to DNS and domain names! https://twitter.com/...
-
@eastdakota
Matthew Prince
on x
Secure your domain registration. Secure your DNS. Don't get those pieces correct and none of your other security will matter. https://twitter.com/...