GoDaddy Employees Used in Attacks on Multiple Cryptocurrency Services
Summary: Fraudsters redirected email and web traffic for several cryptocurrency trading platforms by social engineering a limited number of GoDaddy employees into making unauthorized domain changes, with the campaign appearing to begin around Nov. 13 with an attack on liquid.com. NiceHash found its domain registration records altered without authorization in the early morning of Nov. 18 CET, froze customer funds for roughly 24 hours, and its founder said the changes came from an Internet address at GoDaddy while GoDaddy was unreachable during a system outage.
What you should know: The attackers did not break GoDaddy's infrastructure; they convinced its employees to hand over control, and the same technique was used earlier this year against escrow.com and in the July Twitter bitcoin scam that netted more than $100,000 in a few hours.
Read the original at Krebs on Security ↗
- Topics
- Fraud & Scams
- Related
- ArcticRAT Cybercrime Gang Profiles Victim Finances With AI Cyber Risks · Nov 13, 2026Three People Arrested for AI-Enhanced Impersonation Fraud Cyber Risks · Nov 11, 2026Medicare scam calls, texts and ads: What to watch for this Open Enrollment Cyber Risks · Oct 14, 2026