Hackers Ran Amok Inside GoDaddy for Nearly 3 Years

Hackers Ran Amok Inside GoDaddy for Nearly 3 Years

“We apologize for any inconvenience this may have caused to any of our customers or visitors to their websites,” the company said in a statement. “We are using lessons from this incident to enhance the security of our systems and further protect our customers and their data.”

That apology—and pledge to improve security—would be more reassuring if it weren’t the third time GoDaddy confessed to being breached by the same hacker group in as many years.

The New York Field Office of the FBI has led some of the most high-profile hacking investigations in recent cybersecurity history, including the takedown of Silk Road and the hyperactive Anonymous splinter group LulzSec. Now it may be investigating itself. CNN on Friday reported that the FBI had been breached by hackers, though it had limited the intruders’ access. CNN’s sources told the news outlet that the incident had occurred at the New York Field Office and that the attack had specifically penetrated systems used in its investigation of child exploitation images. “This is an isolated incident that has been contained,” the FBI told CNN in a statement, though it noted that its investigation of the breach is ongoing.

An Israeli firm called Team Jorge claims to have used hacking and disinformation services to meddle in dozens of elections worldwide on behalf of its clients, according to an explosive, undercover investigation by a consortium of journalists. Members of the reporting group, which includes journalists from The Guardian, Le Monde, Der Spiegel, El País, Radio France, Haaretz, and The Marker, posed as prospective clients and recorded a meeting with executives from the firm. In the meeting, the execs boasted of their ability to hack Telegram and Gmail accounts, as well as wielding an army of bots that had been used to carry out social media disinformation campaigns in 33 countries, including nations in Africa, South and Central America, as well as the US and Europe. The company suggested in conversations with the undercover reporters that its hacking methods took advantage of vulnerabilities in SS7, a phone system protocol long understood to be vulnerable. The company's founder, Tal Hanan, a former member of the Israeli special forces, denied “any wrongdoing” when confronted by the journalists.

Russia has long turned a blind eye to its citizens hacking foreign targets—so long as they don't target locals. The Russian parliament, known as the Duma, is now considering a law that would officially absolve Russian hackers of legal liability for hacking “in the interests of the Russian Federation.” The proposed law, which was first reported in Russian state media, would apply to both Russian citizens in Russia and abroad, though the details of the proposal have yet to be released. The proposed legal change provides further evidence—if anyone needed it in the midst of Russia's ongoing war and cyberwar in Ukraine—that the Russian government intends to turn the country into a safe haven for hackers of every stripe, from state-sponsored to criminal to politically motivated.

Oakland's city government has become the latest US city to fall prey to ransomware, declaring a state of emergency eight days after a serious ransomware attack crippled portions of its IT systems. Though it's not clear exactly which municipal systems have been hit—911 dispatch, fire, and other emergency services seem to be unaffected—Oakland's interim city administrator, G. Harold Duffey, referred in a statement to “ongoing impacts of the network outages” from the cyberattack and said that the city was working with forensics firms on investigating the breach.

Add a Comment