Hackare lurade anställda hos GoDaddy värdtjänst för att ta kontroll över krypto-domäner. Många av dessa plattformar upptäcker fortfarande nya faror associerade med denna attack. Forskningsplattformen KrebsOnSecurity rapporterade att cyberkriminella attackerade många krypto-plattformar med en domän på den största värdplattformen, GoDaddy. Angriparna omdirigerade e-post och internettrafik. I GoDaddy-attacken var Liquid kryptovalutabörsen den första att drabbas. Värdtjänsten gav attackern kontroll över kontot och domänen. Hackaren ändrade DNS-posterna och tog kontroll över många interna e-postkonton. Börsens VD, Mike Kayamori, noterade att hackaren delvis lyckades tränga in i plattformsystemet och kom åt dokument. Inga tillgångar som ägs av Liquid blev dock stulna. NiceHash, ett kryptogrävningföretag, drabbades också. De upptäckte att några av deras domäninställningar på GoDaddy-plattformen hade ändrats utan tillstånd och omdirigerade därmed e-post- och internettrafik till webbplatsen under en kort tid. NiceHash frös alla klientfonder i cirka 24 timmar tills domänen verifierades och problemet åtgärdades. NiceHash-grundaren, Matjaz Skorjanc, sa att de obehöriga ändringarna gjordes från GoDaddys webbadress. Bedragarna försökte använda sin åtkomst till företagets inkommande e-post för att återställa lösenord i olika tredjepartstjänster som Slack och Github. Andra offer för attacken misstänks ha varit kryptoföretagen Bibox, Celsius och Wirex. En representant för värdtjänsten erkände att problemet berör en "mindre mängd" domäner. Enligt honom föll ett litet antal anställda offer för phishingbedrägerier.

Attacken mot krypto-plattformar som hostas av GoDaddy

Hackers fooled employees of GoDaddy hosting provider to take control of crypto domains. Many of these platforms are still discovering new dangers associated with this attack.

The research platform KrebsOnSecurity reported that cybercriminals attacked many crypto platforms with a domain on the largest hosting platform, GoDaddy. The attackers redirected e-mail and Internet traffic. In the GoDaddy attack, the Liquid crypto exchange was the first to suffer.

The hosting provider gave the attacker control over the account and domain. The hacker changed the DNS records and took control over many internal e-mail accounts. Exchange CEO Mike Kayamori noted that the hacker partially managed to penetrate the platform system and access documents. However, no assets held by Liquid were stolen.

NiceHash, a crypto mining company, also suffered. They detected that some of their domain settings on the GoDaddy platform had been changed without authorization, thus redirecting email and internet traffic to the site for a short time. NiceHash froze all client funds for about 24 hours until the domain was verified and the problem was fixed.

NiceHash founder, Matjaz Skorjanc, said that the unauthorized changes were made from the GoDaddy website address. The scammers tried to use their access to the company&#39;s incoming emails to reset passwords in various third party services like Slack and Github.

Other victims of the attack are suspected to have been the crypto companies Bibox, Celsius and Wirex. A representative of the hosting provider admitted that the problem concerns a &quot;small number&quot; of domains. According to him, a small number of employees fell victim to phishing scams.

Tu znajdują się posty, które nie były przypisane do żadnej grupy 

Här finns inlägg som inte har tilldelats någon grupp.

ccFOUND Arkiv

ccFOUND Archiwum 

Hackers fooled employees of GoDaddy hosting provider to take control of crypto domains. Many of these platforms are still discovering new dangers associated with this attack.

The research platform KrebsOnSecurity reported that cybercriminals attacked many crypto platforms with a domain on the largest hosting platform, GoDaddy. The attackers redirected e-mail and Internet traffic. In the GoDaddy attack, the Liquid crypto exchange was the first to suffer.

The hosting provider gave the attacker control over the account and domain. The hacker changed the DNS records and took control over many internal e-mail accounts. Exchange CEO Mike Kayamori noted that the hacker partially managed to penetrate the platform system and access documents. However, no assets held by Liquid were stolen.

NiceHash, a crypto mining company, also suffered. They detected that some of their domain settings on the GoDaddy platform had been changed without authorization, thus redirecting email and internet traffic to the site for a short time. NiceHash froze all client funds for about 24 hours until the domain was verified and the problem was fixed.

NiceHash founder, Matjaz Skorjanc, said that the unauthorized changes were made from the GoDaddy website address. The scammers tried to use their access to the company's incoming emails to reset passwords in various third party services like Slack and Github.

Other victims of the attack are suspected to have been the crypto companies Bibox, Celsius and Wirex. A representative of the hosting provider admitted that the problem concerns a "small number" of domains. According to him, a small number of employees fell victim to phishing scams.