Personal media is prevalent, and online tools are becoming more abundant and easier to use. In addition to traditional blogging platforms, many people will choose to build their own websites to post their own creations, ideas, etc. GoDaddy, which is loved by many people, was recently attacked by hackers, causing the personal data of WordPress users who hosted up to 1.2 million items to be leaked. The attackers have been invading the data in a cannibalistic manner more than two months ago.
GoDaddy hacked, data of 1.2 million WordPress users exposed
GoDaddy, the world’s largest domain name registrar and web hosting company, currently serves more than 20 million users worldwide. The company discovered the hack on November 17, but it was found that the attackers had been able to access its network and even the data contained in the system since at least September 6, 2021. GoDaddy Chief Security Officer Demetrius Comes said that suspicious activity was discovered in the WordPress hosting environment, and an investigation was immediately launched with evidence and explanation from the IT company, and law enforcement was contacted.
It is known that attackers can use leaked passwords to access the following GoDaddy information, so the company has also proposed corresponding remedial measures:
- The email addresses and customer numbers of up to 1.2 million active and inactive hosted WordPress users, and a compromise of their email addresses would expose them to the risk of phishing attacks.
- The original default WordPress administrator password has been disclosed. If these credentials are still in use, GoDaddy will reset these passwords to prevent abuse by unscrupulous people.
- For active users, both sFTP and database usernames and passwords are reset by GoDaddy.
- For the active user’s subdomain, the SSL key has been exposed and GoDaddy is in the process of issuing and installing new credentials for the user.
The entire investigation is currently ongoing, and GoDaddy is actively contacting all affected users directly and providing specific details. Users can also contactSupport CenterContact officials.
◎Data source:Bleeping Computer
Source: KOCPC Chinese