GoDaddy employees used in crypto services attacks

San Francisco, Nov 22 (IANS): Fraudsters have used employees at Internet names and registrations management major GoDaddy to attack multiple cryptocurrency services over the past one week, said a report.

While GoDaddy acknowledged that "limited" number of GoDaddy employees fell for a social engineering scam, the company did not reveal how the employees were tricked by the fraudsters to make the unauthorised changes required for the attacks, KrebsOnSecurity reported on Saturday.

The attacks led to modifications of "a small number" of customer domain names, according to GoDaddy spokesperson Dan Race who said that the incident was still under investigation, the report noted.

The use of GoDaddy employees in the attacks came to light after cryptocurrency trading platform liquid.com last week reported a security incident that occurred on November 13.

"A domain hosting provider 'GoDaddy' that manages one of our core domain names incorrectly transferred control of the account and domain to a malicious actor," Liquid CEO Mike Kayamori said in a blog post.

"This gave the actor the ability to change DNS records and in turn, take control of a number of internal email accounts.

In due course, the malicious actor was able to partially compromise our infrastructure, and gain access to document storage."

Liquid said that the malicious actor might have been able to obtain personal information from its user database.

This may include data such as email, name, address and encrypted password.

"After detecting the intruder we intercepted and contained the attack," Kayamori said.

Several other cryptocurrency services subsequently targeted by the fraudsters, according to the KrebsOnSecurity report.

This type of "social engineering" are becoming increasingly common. Earlier this year, Twitter revealed a massive cryptocurrency hack that compromised several high-profile accounts.

Twitter said that the "social engineering" that occurred on July 15 targeted a small number of employees through a phone spear phishing attack.

Comments

Cryptocurrencies Adding to the Safety and Security in the UK Gambling Industry

These are exciting times for the UK gambling industry. The impact of internet technology is now being felt with online gambling now controlling the industry. The adoption of cutting-edge technology is reasonable for the boom in the industry. From live casinos, mobile apps to artificial intelligence, incredible trends continue shaping the gambling industry. However, it is the rise of cryptocurrency casinos that seeks to redefine UK gambling. Many operators now include crypto coins such as bitcoin, Ethereum and Litecoin as part of their banking methods. Others offer exclusive bitcoin payments and promotions based on digital tokens. This revolutionary trend has a huge impact due to enhanced safety and security on these platforms. Players looking for peace of mind when playing online now opt to use cryptocurrencies. This post looks at how cryptos guarantee the safety and security of players at online casinos. How Cryptocurrency Gambling Works There’s a lot of talk ab...

Coinbase to Require Recipient Information for Crypto Transfers From Users in Canada, Singapore and Japan

Customers in those countries who send crypto outside their Coinbase accounts must provide recipients’ names, addresses and in some cases, additional information, as of early April. Cryptocurrency exchange Coinbase Global (COIN) will soon require its customers in Canada, Japan and Singapore who send cryptocurrency to another financial institution or exchange to provide the name, address and in the case of Japan, the destination wallet of the recipient. Coinbase has been sending notices to its customers in those countries that the changes will take effect in early April in order to comply with local travel rules in those places. Coinbase didn't immediately respond to requests for additional comment on the moves, but confirmed that they were taking place. The move does not seem to be going over well with Coinbase customers in those countries, who value the anonymity of transactions using cryptocurrency. According to a FAQ provided by Coinbase , for Canadian users, ...

Farm GRASS earn MONEY

Use your Unused Internet Bandwidth to make $$$ In today’s interconnected world, the concept of passive income has taken on new dimensions, offering innovative ways for individuals to monetize underutilized assets. One such groundbreaking avenue involves earning money by selling your unused internet connection. By participating in decentralized networks like Grass, individuals have the opportunity to turn their dormant bandwidth into a valuable asset, contributing to a fairer and more equitable digital landscape while generating income. Grass is a decentralized network sharing application designed to offer an alternative to existing centralized networks. It allows users to sell their unused bandwidth directly, without the need for exploitative middlemen. The platform operates by enabling users to download a web extension that runs in the background, assisting others in accessing public web data in exchange for payment using the protocol’s native token. How ...

Crypto Ethone

Search This Blog