Forum Moderators: open

Message Too Old, No Replies

Security: Weak Links Are Still Humans

         

engine

5:12 pm on Nov 23, 2020 (gmt 0)

WebmasterWorld Administrator 10+ Year Member Top Contributors Of The Month



According to the latest report at Krebs, fraudsters targeted employees at GoDaddy to gain email redirects of some cryptocurrency platforms.
The incident is the latest incursion at GoDaddy that relied on tricking employees into transferring ownership and/or control over targeted domains to fraudsters. In March, a voice phishing scam targeting GoDaddy support employees allowed attackers to assume control over at least a half-dozen domain names, including transaction brokering site escrow.com.

And in May of this year, GoDaddy disclosed that 28,000 of its customers’ web hosting accounts were compromised following a security incident in Oct. 2019 that wasn’t discovered until April 2020.
This latest campaign appears to have begun on or around Nov. 13, with an attack on cryptocurrency trading platform liquid.com.


[krebsonsecurity.com...]

It's not the first time i've seen humans being the target, and, potentially, a weak link in the chain.

tangor

11:01 pm on Nov 23, 2020 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



We've always known that the loose screw was the nut behind the keyboard. Sigh.

engine

9:22 am on Nov 24, 2020 (gmt 0)

WebmasterWorld Administrator 10+ Year Member Top Contributors Of The Month



The scammers are highly sophisticated in their approach and experienced in manipulating individuals. There have been plenty of examples of them plying their trade, and it'll only get more common. 419 scams seem so lightweight nowadays.