Details have emerged regarding the GoDaddy breach, one of the largest domain registrars and hosting providers. On November 17, traces of unauthorized access to the servers responsible for hosting WordPress-based platforms (managed WordPress environments provided by the provider) were discovered. An investigation into the incident revealed that outsiders gained access to the WordPress hosting management system through a compromised password of one of the employees and exploited an unpatched vulnerability in the outdated system to access confidential information about 1.2 million active and inactive users of WordPress hosting.
The attackers obtained data on usernames and passwords used by customers in the database and SFTP; the passwords of the administrator for each instance of WordPress, set during the initial creation of the hosting environment; secret keys of a portion of active users; email addresses and client numbers that could be used for phishing. It is noted that the attackers had access to the infrastructure starting September 6. SSLDetails have emerged regarding the GoDaddy breach, one of the largest domain registrars and hosting providers.
Bron: opennet.ru
