A GoDaddy hack has been revealed, one of the largest domain registrars and hosting providers. On November 17, unauthorized access to servers providing hosting on the WordPress platform was detected (managed WordPress environments provided by the provider). An investigation of the incident showed that outsiders gained access to the WordPress hosting management system through a compromised password of one of the employees and exploited an unpatched vulnerability in an outdated system to access confidential information about 1.2 million active and inactive users of WordPress hosting.
The attackers obtained data on account usernames and passwords used by customers in the DBMS and SFTP; administrator passwords for each instance of WordPress set during the initial creation of the hosting environment; private keys of some active users; email addresses and customer phone numbers that could be used for phishing. It is noted that the attackers had access to the infrastructure starting from September 6. SSLDetails of a hack into GoDaddy, one of the largest domain registrars and hosting providers, have been revealed.
Forrás: opennet.ru
