GoDaddy: Hacker group installed malware on hosting servers that redirected sites

Web hoster GoDaddy says a hacker group accessed GoDaddy’s hosting servers in December last year and installed malware on them. That malware caused some customer sites to redirect to malicious sites. The hacker group has been attacking GoDaddy for years.

The group accessed GoDaddy’s cPanel environment and installed malware that caused sites to randomly and irregularly redirect visitors to other sites. It’s not clear how big this problem was, but the web host says to have received ‘a small number’ of complaints about this. The malware was believed to be part of a phishing campaign “and other malicious activities.”

GoDaddy says it has now resolved the problem and is in contact with police and experts. It company says based on research now to think that the attack was carried out by a group that has been attacking GoDaddy for years. In one of those attacks, the group ‘sharing’ allegedly stole source code. This group is said to be behind the data breach of 28,000 accounts from 2019 and the later theft of customer data and admin passwords from up to 1.2 million users in 2021. GoDaddy does not name the group, but says it would also attack other web hosts.