Over 1 Million WordPress Websites Breached

According to several sources over a million WordPress websites hosted by GoDaddy
have been compromised because of their hosting servers.



Not sure why anyone would do business with GoDaddy outside of auctions.

If you are hosted there I hope you have
off cloud backups.
Always have backups stored locally.

https://techcrunch.com/2021/11/22/godaddy-breach-million-accounts/

Yup this dropped early my morning, I had the exact same reaction.

Guess we should expect some new niche edits service any minute now.

636173696e6f said:

should expect some new niche edits service any minute now

Click to expand...

So what happens with the breach? Is there any damage or are they just accessing?

The funny thing is they got to know they were hacked after a month's time

plopza said:

So what happens with the breach? Is there any damage or are they just accessing?

Click to expand...

From what I have gathered it is accessing.
A lot can be done at this point.

plopza said:

So what happens with the breach? Is there any damage or are they just accessing?

Click to expand...

Well if you have a WP blog hosted with them you should change your password as soon as possible and then get off that platform just to be sure. Storing passwords as plain text is off

passwords stored in plain text is the best example of giving 0 ***ks about your clients, 100% agreed, change password, get out.

Squidee said:

According to several sources over a million WordPress websites hosted by GoDaddy
have been compromised because of their hosting servers.

Not sure why anyone would do business with GoDaddy outside of auctions.

If you are hosted there I hope you have
off cloud backups.
Always have backups stored locally.

https://techcrunch.com/2021/11/22/godaddy-breach-million-accounts/

Click to expand...

That's why html and php rules! Your own php cms with no possibility of hackers attacking it just works!

Let's say for example right... you had access to these sites.. What would be the first thing you'd do to make money?

mohan jalla said:

Let's say for example right... you had access to these sites.. What would be the first thing you'd do to make money?

Click to expand...

Contact the web owner, tell them how terrible GoDaddy is, and send them a proposal for new hosting + security/website.

Nothing sells you better than urgency.

Email header "You Were Hacked!"
Somewhere in the body of the text reference a reputable news clip.

Your question is s u s p i c i o u s tho...

Lol, imagine actually hosting at GoDaddy.

Squidee said:

Contact the web owner, tell them how terrible GoDaddy is, and send them a proposal for new hosting + security/website.

Nothing sells you better than urgency.

Email header "You Were Hacked!"
Somewhere in the body of the text reference a reputable news clip.

Your question is s u s p i c i o u s tho...

Click to expand...

sure! buy hosting from your hacker. That'd do the trick..lol
Not suspicious, just throwing ideas out there

edit: Tbh "most" wordpress sites still on Godaddy are abandoned sites or personal blogs with low readership..Godaddy just sucks
Okay for domains tho

mohan jalla said:

sure! buy hosting from your hacker. That'd do the trick..lol
Not suspicious, just throwing ideas out there

edit: Tbh "most" wordpress sites still on Godaddy are abandoned sites or personal blogs with low readership..Godaddy just sucks
Okay for domains tho

Click to expand...

i would email the webmaster of the site. pose as a website security expert/consultant/whatever. not as the guy who hacked them. get them to migrate off godaddy & onto your web host. you can even be lazy and just link them to hostgator affiliate program or something like that. if your english is good you can even consider having them book a call with you. and sell them on the phone. simple hosting package or manage server+WP for them for a recurring bill. everyone i run into IRL who uses godaddy is simply naiive and thinks they are the only game in town because they have TV commercials.

but if you are unethical and had the list of domains. and got the list of users/passwords. make the target sites 301 redirect to your chaturbate affiliate link. or whatever cpa offer you feel will do good.
again assuming you had the list of domains + credentials. you could make a python script to do that to the whole list of sites very quickly and efficiently.
first run the domains through an alexa rank [bulk online check tools are out there] to see which ones are top priority as they have higher traffic.

Make sure to update to the latest version of Wordpress folks!

Squidee said:

According to several sources over a million WordPress websites hosted by GoDaddy
have been compromised because of their hosting servers.

Not sure why anyone would do business with GoDaddy outside of auctions.

If you are hosted there I hope you have
off cloud backups.
Always have backups stored locally.

https://techcrunch.com/2021/11/22/godaddy-breach-million-accounts/

Click to expand...

This's not a new thing that happen, this is happen before. Godaddy is a one of the worst hosting provider

Stopped reading at GoDaddy

This is why I host my own sites. I'm fully in control of security.

Billy Batts said:

Stopped reading at GoDaddy

This is why I host my own sites. I'm fully in control of security.

Click to expand...

I swear years back I searched for a domain name on GoDaddy and 5 minutes later I go back and it is suddenly "taken" but can be purchased for a premium.

Others had this happen too, but I don't have proof.

It's a dreadful
company that competes with EIG for who can screw
over people the most annually.

I've never hosted with them and if they didn't have a monopoly on domain auctions they would not even exist to me.

Squidee said:

I swear years back I searched for a domain name on GoDaddy and 5 minutes later I go back and it is suddenly "taken" but can be purchased for a premium.

Others had this happen too, but I don't have proof.

It's a dreadful
company that competes with EIG for who can screw
over people the most annually.

I've never hosted with them and if they didn't have a monopoly on domain auctions they would not even exist to me.

Click to expand...

I had the same once. Looked up a domain, it was available, 10 min later it was taken and in the auction.

Also fell for the $1 domain, horrible site and service.

Sorry for saying this but they deserve it for hosting at Godaddy.