GoDaddy stole source code and installed malware on hosting servers

GoDaddy, one of the largest web hosting companies, said it was attacked by unknown attackers who managed to steal source code and install malware on its servers after breaching its cPanel hosting environment in a multi-year attack.

GoDaddy discovered the breach in early December 2022 after customer reports that their websites were being used to redirect to random domains, but the attackers reportedly had access to the company's network for years.

See more articles from iGuRu.gr when you search for news on Google.

iGuRu.gr preferred source

"Based on our investigation, we believe these incidents are part of a multi-year attack by a sophisticated hacking group that, among other things, installed malware on our systems and obtained pieces of the source code from certain GoDaddy services," the company said in a statement. its SEC filing.

The company reported that breaches from November 2021 and March 2020 were discovered and ultimately allegedly linked to this multi-year attack.

The November 2021 incident resulted in a data breach affecting 1,2 million managed WordPress customers after attackers breached GoDaddy's WordPress hosting environment using a compromised password.

They gained access to all affected customers' email addresses, WordPress admin passwords, sFTP credentials, databases, and SSL private keys of some active customers.

giorgos

George is still wondering what he is doing here….