GoDaddy has disclosed that it discovered a breach in December 2022 that resulted in a threat actor redirecting customer websites to malicious domains, BleepingComputer reports.
Threat actor targets hosting services.
GoDaddy says the threat actor was able to install malware in the company’s cPanel shared hosting environment:
“In early December 2022, we started receiving a small number of customer complaints about their websites being intermittently redirected. Upon receiving these complaints, we investigated and found that the intermittent redirects were happening on seemingly random websites hosted on our cPanel shared hosting servers and were not easily reproducible by GoDaddy, even on the same website.
“As our investigation continued, we discovered that an unauthorized third party…
Source link