I came across this article publishing an incident in which GoDaddy found their servers had been breached for up to three years before they were even made aware of the incident…!
Imagine being a WP newb, setting everything up right and still finding your sites are getting hacked. Would you ever stop to think it’s not a dodgy plug-in, or incorrect hardening, but the infrastructure itself that was the problem? Probably not! You’d probably be pulling your hair out think wth went wrong and still probably think it’s somehow your fault / CMS’s fault rather than the actual webhost.
A group of hackers it had repeatedly spotted inside its network had returned—or never left—and have been wreaking havoc in its network since at least March 2020, despite all the company's attempts to expel them.
GoDaddy revealed in a statement on Thursday it had discovered that hackers inside its systems had installed malware on its network and stolen parts of its code. The company says it became aware of the intrusion in December 2022 when customers—the company hasn't said how many—began reporting that their websites were being mysteriously redirected to other domains. GoDaddy says it's investigating the breach and working with law enforcement, who have told the company that the hackers’ “apparent goal is to infect websites and servers with malware for phishing campaigns, malware distribution, and other malicious activities.”
Imagine being a WP newb, setting everything up right and still finding your sites are getting hacked. Would you ever stop to think it’s not a dodgy plug-in, or incorrect hardening, but the infrastructure itself that was the problem? Probably not! You’d probably be pulling your hair out think wth went wrong and still probably think it’s somehow your fault / CMS’s fault rather than the actual webhost.
Last edited: