GoDaddy Employees Tricked Into Transferring Control of Crypto Firm Domains: Report

Cryptocurrency trading platform liquid.com and crypto mining firm NiceHash were two of at least six firms that had control of their domains briefly transferred.

AccessTimeIconNov 22, 2020 at 1:23 p.m. UTC
Updated Sep 14, 2021 at 10:33 a.m. UTC
10 Years of Decentralizing the Future
May 29-31, 2024 - Austin, TexasThe biggest and most established global hub for everything crypto, blockchain and Web3.Register Now

Cryptocurrency trading platform liquid.com and crypto mining firm NiceHash were two of at least six firms that had control of their domains briefly transferred to malicious actors last week after employees at GoDaddy, the world's largest domain registrar, were again tricked by fraudsters, KrebsOnSecurity reported.

  • It wasn't immediately clear if any of the attacks resulted in a loss of funds.
  • The attacks are similar to the July assault on Twitter in which that firm's employees were tricked using social engineering to giving access to the company's administrative tools, thus allowing the hackers to control about 130 high-profile accounts.
  • Liquid CEO Mike Kayamori confirmed the latest breach in a blog post. “This gave the actor the ability to change DNS records and in turn, take control of a number of internal email accounts. In due course, the malicious actor was able to partially compromise our infrastructure, and gain access to document storage,” the CEO said.
  • NiceHash also confirmed it had been subject to a similar attack, but that no emails, passwords or personal data were compromised.
  • The incursions may have also affected cryptocurrency platforms Bibox.com, Celsius.network and Wirex.app, according to the report, which said none of those companies responded to comment.
  • GoDaddy acknowledged to KrebsOnSecurity that “a small number” of domain names had been modified after a “limited” number of the firms employees fell for a social engineering scam. The company declined to say how its employees were tricked.
  • The attacks follow similar incursions at GoDaddy, including one in March in which a voice phishing scam tricked GoDaddy support employees, allowing malicious actors to take control of at least six domain names, KrebsOnSecurity said.

Disclosure

Please note that our privacy policy, terms of use, cookies, and do not sell my personal information has been updated.

The leader in news and information on cryptocurrency, digital assets and the future of money, CoinDesk is an award-winning media outlet that strives for the highest journalistic standards and abides by a strict set of editorial policies. In November 2023, CoinDesk was acquired by Bullish group, owner of Bullish, a regulated, institutional digital assets exchange. Bullish group is majority owned by Block.one; both groups have interests in a variety of blockchain and digital asset businesses and significant holdings of digital assets, including bitcoin. CoinDesk operates as an independent subsidiary, and an editorial committee, chaired by a former editor-in-chief of The Wall Street Journal, is being formed to support journalistic integrity.


Learn more about Consensus 2024, CoinDesk's longest-running and most influential event that brings together all sides of crypto, blockchain and Web3. Head to consensus.coindesk.com to register and buy your pass now.