{"id":38339,"date":"2020-11-23T14:09:04","date_gmt":"2020-11-23T14:09:04","guid":{"rendered":"https:\/\/packetstormsecurity.com\/news\/view\/31789\/Attackers-Dupe-GoDaddy-Staff-Into-Helping-Them-Take-Down-Cryptocurrency-Services.html"},"modified":"2020-11-23T14:09:04","modified_gmt":"2020-11-23T14:09:04","slug":"attackers-dupe-godaddy-staff-into-helping-them-take-down-cryptocurrency-services","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/attackers-dupe-godaddy-staff-into-helping-them-take-down-cryptocurrency-services\/","title":{"rendered":"Attackers Dupe GoDaddy Staff Into Helping Them Take Down Cryptocurrency Services"},"content":{"rendered":"<figure class=\"sc-1eow4w5-1 dhDQnh align--bleed js_lazy-image js_marquee-assetfigure\" data-id=\"ekjbib112v9of8zco8as\" data-recommend-id=\"image:\/\/ekjbib112v9of8zco8as\" data-format=\"jpg\" data-width=\"6979\" data-height=\"3911\" data-lightbox=\"true\" data-recommended=\"false\" contenteditable=\"false\" draggable=\"false\">\n<div class=\"sc-1eow4w5-2 loxZOX img-wrapper\" contenteditable=\"false\" data-syndicationrights=\"true\" data-imagerights=\"getty\" data-hidecredit=\"false\"><span class=\"sc-1eow4w5-0 dnhHtZ js_lightbox-wrapper\"><\/p>\n<div class=\"sc-1eow4w5-3 lktKQM image-hydration-wrapper\">\n<div><img decoding=\"async\" src=\"data:image\/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==\" alt=\"Illustration for article titled Attackers Dupe GoDaddy Staff Into Helping Them Take Down Cryptocurrency Services\" data-expanded-srcset=\"https:\/\/i.kinja-img.com\/gawker-media\/image\/upload\/c_fill,f_auto,fl_progressive,g_center,h_80,pg_1,q_80,w_80\/ekjbib112v9of8zco8as.jpg 80w, https:\/\/i.kinja-img.com\/gawker-media\/image\/upload\/c_fit,f_auto,g_center,pg_1,q_60,w_140\/ekjbib112v9of8zco8as.jpg 140w, https:\/\/i.kinja-img.com\/gawker-media\/image\/upload\/c_fit,f_auto,g_center,pg_1,q_60,w_265\/ekjbib112v9of8zco8as.jpg 265w, https:\/\/i.kinja-img.com\/gawker-media\/image\/upload\/c_fit,f_auto,g_center,pg_1,q_60,w_340\/ekjbib112v9of8zco8as.jpg 340w, https:\/\/i.kinja-img.com\/gawker-media\/image\/upload\/c_fit,f_auto,g_center,pg_1,q_60,w_490\/ekjbib112v9of8zco8as.jpg 490w, https:\/\/i.kinja-img.com\/gawker-media\/image\/upload\/c_fit,f_auto,g_center,pg_1,q_60,w_645\/ekjbib112v9of8zco8as.jpg 645w, https:\/\/i.kinja-img.com\/gawker-media\/image\/upload\/c_fit,f_auto,g_center,pg_1,q_60,w_740\/ekjbib112v9of8zco8as.jpg 740w, https:\/\/i.kinja-img.com\/gawker-media\/image\/upload\/c_fit,f_auto,g_center,pg_1,q_60,w_965\/ekjbib112v9of8zco8as.jpg 965w, https:\/\/i.kinja-img.com\/gawker-media\/image\/upload\/c_fit,f_auto,g_center,pg_1,q_60,w_1165\/ekjbib112v9of8zco8as.jpg 1165w, https:\/\/i.kinja-img.com\/gawker-media\/image\/upload\/c_fit,f_auto,g_center,pg_1,q_60,w_1315\/ekjbib112v9of8zco8as.jpg 1315w, https:\/\/i.kinja-img.com\/gawker-media\/image\/upload\/c_fit,f_auto,g_center,pg_1,q_60,w_1465\/ekjbib112v9of8zco8as.jpg 1465w, https:\/\/i.kinja-img.com\/gawker-media\/image\/upload\/c_fit,f_auto,g_center,pg_1,q_60,w_1600\/ekjbib112v9of8zco8as.jpg 1600w\" sizes draggable=\"auto\" data-chomp-id=\"ekjbib112v9of8zco8as\" data-format=\"jpg\" data-alt=\"Illustration for article titled Attackers Dupe GoDaddy Staff Into Helping Them Take Down Cryptocurrency Services\" data-anim-src srcset=\"https:\/\/i.kinja-img.com\/gawker-media\/image\/upload\/c_fill,f_auto,fl_progressive,g_center,h_80,pg_1,q_80,w_80\/ekjbib112v9of8zco8as.jpg 80w, https:\/\/i.kinja-img.com\/gawker-media\/image\/upload\/c_fit,fl_progressive,q_80,w_320\/ekjbib112v9of8zco8as.jpg 320w, https:\/\/i.kinja-img.com\/gawker-media\/image\/upload\/c_fit,f_auto,fl_progressive,pg_1,q_80,w_470\/ekjbib112v9of8zco8as.jpg 470w, https:\/\/i.kinja-img.com\/gawker-media\/image\/upload\/c_scale,f_auto,fl_progressive,pg_1,q_80,w_800\/ekjbib112v9of8zco8as.jpg 800w, https:\/\/i.kinja-img.com\/gawker-media\/image\/upload\/c_scale,f_auto,fl_progressive,pg_1,q_80,w_1600\/ekjbib112v9of8zco8as.jpg 1600w\"><\/div>\n<\/div>\n<p><\/span><figcaption class=\"sc-7s1ndr-0 cqfyTB no-caption\">Photo<!-- -->: <!-- -->Issouf Sanogo<!-- --> (<!-- -->Getty Images<!-- -->)<\/figcaption><\/div>\n<p><span data-id=\"ekjbib112v9of8zco8as\" data-recommend-id=\"image:\/\/ekjbib112v9of8zco8as\" data-format=\"jpg\" data-width=\"6979\" data-height=\"3911\" data-lightbox=\"true\" data-recommended=\"false\" class=\"js_recommend\"><\/span><\/figure>\n<p><span><\/span><\/p>\n<p class=\"sc-77igqf-0 bOfvBY\">Roughly one year after a data breach at GoDaddy compromised <span><a class=\"sc-1out364-0 hMndXN sc-145m8ut-0 kVnoAv js_link\" data-ga=\"[[&quot;Embedded Url&quot;,&quot;Internal link&quot;,&quot;https:\/\/gizmodo.com\/godaddy-was-apparently-hacked-last-year-so-check-your-1843265524&quot;,{&quot;metric25&quot;:1}]]\" href=\"https:\/\/gizmodo.com\/godaddy-was-apparently-hacked-last-year-so-check-your-1843265524\">28,000 customer accounts<\/a><\/span>, the world\u2019s largest internet domain registrar is once again at the center of a security scandal. Hackers brought down several cryptocurrency services using GoDaddy domains in recent weeks, and apparently the company\u2019s own staff unwittingly helped in these attacks. <\/p>\n<div class=\"bxm4mm-4 fQqUFt\">\n<div id=\"swappable-mobile-ad-container\" class=\"bxm4mm-11 gamHXh js_ad-mobile-dynamic swappable-mobile-ad-container js_ad-dynamic ad-mobile-dynamic movable-ad\">\n<div class=\"bxm4mm-12 uBHOx ad-unit ad-mobile\">\n<p>Advertisement<\/p>\n<\/div>\n<\/div>\n<\/div>\n<p class=\"sc-77igqf-0 bOfvBY\">Hackers purportedly duped GoDaddy employees into handing over the reins to several cryptocurrency services\u2019 web domains, and then used those permissions to make unauthorized changes and bring down the sites, per a report from the cyber-centric blog <span><a class=\"sc-1out364-0 hMndXN sc-145m8ut-0 kVnoAv js_link\" data-ga=\"[[&quot;Embedded Url&quot;,&quot;External link&quot;,&quot;https:\/\/krebsonsecurity.com\/2020\/11\/godaddy-employees-used-in-attacks-on-multiple-cryptocurrency-services\/&quot;,{&quot;metric25&quot;:1}]]\" href=\"https:\/\/krebsonsecurity.com\/2020\/11\/godaddy-employees-used-in-attacks-on-multiple-cryptocurrency-services\/\" target=\"_blank\" rel=\"noopener noreferrer\">Krebs On Security<\/a><\/span> on Saturday. While it remains unclear how many companies fell for this scam, the cryptocurrency trading platform Liquid and mining service NiceHash uncovered attacks within days of each other.<\/p>\n<p class=\"sc-77igqf-0 bOfvBY\">\u201cOn the 13<sup>th<\/sup> of November 2020, a domain hosting provider \u2018GoDaddy\u2019 that manages one of our core domain names incorrectly transferred control of the account and domain to a malicious actor,\u201d said Liquid CEO Mike Kayamori in a <span><a class=\"sc-1out364-0 hMndXN sc-145m8ut-0 kVnoAv js_link\" data-ga=\"[[&quot;Embedded Url&quot;,&quot;External link&quot;,&quot;https:\/\/blog.liquid.com\/security-incident-november-13-2020?=11172020&quot;,{&quot;metric25&quot;:1}]]\" href=\"https:\/\/blog.liquid.com\/security-incident-november-13-2020?=11172020\" target=\"_blank\" rel=\"noopener noreferrer\">blog post<\/a><\/span> on Wednesday. \u201cThis gave the actor the ability to change DNS records and in turn, take control of a number of internal email accounts. In due course, the malicious actor was able to partially compromise our infrastructure, and gain access to document storage.\u201d<\/p>\n<div id class=\"bxm4mm-11 gamHXh js_ad-mobile-dynamic js_ad-dynamic ad-mobile-dynamic movable-ad\">\n<div class=\"bxm4mm-12 iqioLK ad-unit ad-mobile\">\n<p>Advertisement<\/p>\n<\/div>\n<\/div>\n<p class=\"sc-77igqf-0 bOfvBY\">NiceHash pushed out <span><a class=\"sc-1out364-0 hMndXN sc-145m8ut-0 kVnoAv js_link\" data-ga=\"[[&quot;Embedded Url&quot;,&quot;External link&quot;,&quot;https:\/\/www.nicehash.com\/blog\/post\/nicehash-is-back-online-what-happened&quot;,{&quot;metric25&quot;:1}]]\" href=\"https:\/\/www.nicehash.com\/blog\/post\/nicehash-is-back-online-what-happened\" target=\"_blank\" rel=\"noopener noreferrer\">a blog post<\/a><\/span> on Tuesday warning users that it discovered several unauthorized changes in the settings for its domain registration records. The company immediately froze all user funds, which remained inaccessible for roughly 24 hours, and launched an investigation into the matter, but ultimately found that \u201cno emails, passwords, or any personal data were accessed\u201d by hackers.<\/p>\n<p class=\"sc-77igqf-0 bOfvBY\">What\u2019s also unclear is how these hackers went about scamming GoDaddy employees into transferring ownership of the domains in the first place. In a statement to <span><a class=\"sc-1out364-0 hMndXN sc-145m8ut-0 kVnoAv js_link\" data-ga=\"[[&quot;Embedded Url&quot;,&quot;External link&quot;,&quot;https:\/\/www.engadget.com\/godaddy-tricked-into-helping-cryptocurrency-attack-220911454.html?utm_source=feedburner&amp;utm_medium=feed&amp;utm_campaign=Feed%3A+weblogsinc%2Fengadget+%28Engadget%29&quot;,{&quot;metric25&quot;:1}]]\" href=\"https:\/\/www.engadget.com\/godaddy-tricked-into-helping-cryptocurrency-attack-220911454.html?utm_source=feedburner&amp;utm_medium=feed&amp;utm_campaign=Feed%3A+weblogsinc%2Fengadget+%28Engadget%29\" target=\"_blank\" rel=\"noopener noreferrer\">Engadget<\/a><\/span>, a company spokesperson confirmed that a \u201climited number\u201d of employees had fallen for \u201csocial engineering\u201d attacks that allowed hackers to tamper with accounts and domains without authorization, but didn\u2019t go into further detail. <\/p>\n<div class=\"bxm4mm-19 fIUNXF\" readability=\"1.9565217391304\">\n<div class=\"sc-1to1lfh-1 kzUztX js_commerce-inset-permalink\" data-inset-url=\"https:\/\/www.amazon.com\/dp\/B07FFCN3DJ?ots=1&amp;slotNum=11&amp;imprToken=66bae154-ee2d-ca20-078&amp;ascsubtag=4c440ce3132ade23ea9e69d141c1833aa335c5a6&amp;linkCode=ogi&amp;psc=1&amp;smid=ATVPDKIKX0DER&amp;tag=kinjadeals-20&amp;th=1\" data-inset-category=\"CommerceInsetMobile\" readability=\"2.2826086956522\">\n<p>G\/O Media may get a commission<\/p>\n<\/div>\n<\/div>\n<p class=\"sc-77igqf-0 bOfvBY\">Social engineering refers to attacks in which hackers use their social skills to harvest <!-- -->information from an <!-- -->organization or its networks, according to the <span><a class=\"sc-1out364-0 hMndXN sc-145m8ut-0 kVnoAv js_link\" data-ga=\"[[&quot;Embedded Url&quot;,&quot;External link&quot;,&quot;https:\/\/us-cert.cisa.gov\/ncas\/tips\/ST04-014&quot;,{&quot;metric25&quot;:1}]]\" href=\"https:\/\/us-cert.cisa.gov\/ncas\/tips\/ST04-014\" target=\"_blank\" rel=\"noopener noreferrer\">Cybersecurity and Infrastructure Security Agency<\/a><\/span>. Phishing, an attack in which hackers use emails or malicious websites from seemingly credible organizations to steal information, falls under that category<!-- -->. <\/p>\n<p class=\"sc-77igqf-0 bOfvBY\">The spokesperson said that GoDaddy responded by locking accounts, undoing any changes that the hackers made, and working with victims to help them regain access. <\/p>\n<div id class=\"bxm4mm-11 gamHXh js_ad-mobile-dynamic js_ad-dynamic ad-mobile-dynamic movable-ad\">\n<div class=\"bxm4mm-12 iqioLK ad-unit ad-mobile\">\n<p>Advertisement<\/p>\n<\/div>\n<\/div>\n<p class=\"sc-77igqf-0 bOfvBY\">It\u2019d be <em>really <\/em>embarrassing if GoDaddy employees fell victim to the same kind of voice phishing tactics caused another data breach <span><a class=\"sc-1out364-0 hMndXN sc-145m8ut-0 kVnoAv js_link\" data-ga=\"[[&quot;Embedded Url&quot;,&quot;External link&quot;,&quot;https:\/\/krebsonsecurity.com\/2020\/03\/phish-of-godaddy-employee-jeopardized-escrow-com-among-others\/&quot;,{&quot;metric25&quot;:1}]]\" href=\"https:\/\/krebsonsecurity.com\/2020\/03\/phish-of-godaddy-employee-jeopardized-escrow-com-among-others\/\" target=\"_blank\" rel=\"noopener noreferrer\">in March<\/a><\/span>. That campaign compromised several domains, including the transaction brokering site Escrow.com, and GoDaddy later admitted that one <!-- -->of its employees had fallen victim to \u201ca spear-phishing or social engineering attack.\u201d <\/p>\n<p class=\"sc-77igqf-0 bOfvBY\">As Krebs notes, hackers have increasingly relied on <span><a class=\"sc-1out364-0 hMndXN sc-145m8ut-0 kVnoAv js_link\" data-ga=\"[[&quot;Embedded Url&quot;,&quot;External link&quot;,&quot;https:\/\/krebsonsecurity.com\/2020\/08\/voice-phishers-targeting-corporate-vpns\/&quot;,{&quot;metric25&quot;:1}]]\" href=\"https:\/\/krebsonsecurity.com\/2020\/08\/voice-phishers-targeting-corporate-vpns\/\" target=\"_blank\" rel=\"noopener noreferrer\">voice phishing<\/a><\/span>, or \u201cvishing,\u201d to attack corporations in recent months. That\u2019s when attackers use one-on-one phone calls, often pretending to be tech support for a target\u2019s employer, to try to steer targets toward phishing sites to harvest account credentials and other sensitive company information.<\/p>\n<div id class=\"bxm4mm-11 gamHXh js_ad-mobile-dynamic js_ad-dynamic ad-mobile-dynamic movable-ad\">\n<div class=\"bxm4mm-12 iqioLK ad-unit ad-mobile\">\n<p>Advertisement<\/p>\n<\/div>\n<\/div>\n<p class=\"sc-77igqf-0 bOfvBY\">Although we don\u2019t know exactly <!-- -->how the hackers pulled one<!-- --> over on <!-- --> GoDaddy\u2019s staff,<!-- --> this <!-- -->incident is a reminder that humans aren\u2019t perfect. Then again, these kinds of <!-- -->attacks aren\u2019t exactly new, so instead of just gaping a<!-- -->t human error, perhaps corporations <!-- -->should focus on strengthening both <!-- -->human <em>and <\/em>machine security protocols to try to prevent incidents like this <!-- -->from happening in the future<!-- -->.<\/p>\n<p class=\"sc-77igqf-0 bOfvBY\">[<span><a class=\"sc-1out364-0 hMndXN sc-145m8ut-0 kVnoAv js_link\" data-ga=\"[[&quot;Embedded Url&quot;,&quot;External link&quot;,&quot;https:\/\/krebsonsecurity.com\/2020\/11\/godaddy-employees-used-in-attacks-on-multiple-cryptocurrency-services\/&quot;,{&quot;metric25&quot;:1}]]\" href=\"https:\/\/krebsonsecurity.com\/2020\/11\/godaddy-employees-used-in-attacks-on-multiple-cryptocurrency-services\/\" target=\"_blank\" rel=\"noopener noreferrer\">Krebs on Security<\/a><\/span>]<\/p>\n<div id class=\"bxm4mm-11 gamHXh js_ad-mobile-dynamic js_ad-dynamic ad-mobile-dynamic movable-ad\">\n<div class=\"bxm4mm-12 iqioLK ad-unit ad-mobile\">\n<p>Advertisement<\/p>\n<\/div>\n<\/div>\n<p>READ MORE <a href=\"https:\/\/packetstormsecurity.com\/news\/view\/31789\/Attackers-Dupe-GoDaddy-Staff-Into-Helping-Them-Take-Down-Cryptocurrency-Services.html\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>READ MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":38340,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[277],"tags":[9059],"class_list":["post-38339","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity-blogs","tag-headlinehackerdnssocialcryptography"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Attackers Dupe GoDaddy Staff Into Helping Them Take Down Cryptocurrency Services 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/attackers-dupe-godaddy-staff-into-helping-them-take-down-cryptocurrency-services\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Attackers Dupe GoDaddy Staff Into Helping Them Take Down Cryptocurrency Services 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/attackers-dupe-godaddy-staff-into-helping-them-take-down-cryptocurrency-services\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2020-11-23T14:09:04+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/11\/attackers-dupe-godaddy-staff-into-helping-them-take-down-cryptocurrency-services.gif\" \/>\n\t<meta property=\"og:image:width\" content=\"1\" \/>\n\t<meta property=\"og:image:height\" content=\"1\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/gif\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/attackers-dupe-godaddy-staff-into-helping-them-take-down-cryptocurrency-services\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/attackers-dupe-godaddy-staff-into-helping-them-take-down-cryptocurrency-services\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Attackers Dupe GoDaddy Staff Into Helping Them Take Down Cryptocurrency Services\",\"datePublished\":\"2020-11-23T14:09:04+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/attackers-dupe-godaddy-staff-into-helping-them-take-down-cryptocurrency-services\\\/\"},\"wordCount\":612,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/attackers-dupe-godaddy-staff-into-helping-them-take-down-cryptocurrency-services\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/11\\\/attackers-dupe-godaddy-staff-into-helping-them-take-down-cryptocurrency-services.gif\",\"keywords\":[\"headline,hacker,dns,social,cryptography\"],\"articleSection\":[\"CyberSecurity Blogs\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/attackers-dupe-godaddy-staff-into-helping-them-take-down-cryptocurrency-services\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/attackers-dupe-godaddy-staff-into-helping-them-take-down-cryptocurrency-services\\\/\",\"name\":\"Attackers Dupe GoDaddy Staff Into Helping Them Take Down Cryptocurrency Services 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/attackers-dupe-godaddy-staff-into-helping-them-take-down-cryptocurrency-services\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/attackers-dupe-godaddy-staff-into-helping-them-take-down-cryptocurrency-services\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/11\\\/attackers-dupe-godaddy-staff-into-helping-them-take-down-cryptocurrency-services.gif\",\"datePublished\":\"2020-11-23T14:09:04+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/attackers-dupe-godaddy-staff-into-helping-them-take-down-cryptocurrency-services\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/attackers-dupe-godaddy-staff-into-helping-them-take-down-cryptocurrency-services\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/attackers-dupe-godaddy-staff-into-helping-them-take-down-cryptocurrency-services\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/11\\\/attackers-dupe-godaddy-staff-into-helping-them-take-down-cryptocurrency-services.gif\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/11\\\/attackers-dupe-godaddy-staff-into-helping-them-take-down-cryptocurrency-services.gif\",\"width\":1,\"height\":1},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/attackers-dupe-godaddy-staff-into-helping-them-take-down-cryptocurrency-services\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"headline,hacker,dns,social,cryptography\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/tag\\\/headlinehackerdnssocialcryptography\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Attackers Dupe GoDaddy Staff Into Helping Them Take Down Cryptocurrency Services\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Attackers Dupe GoDaddy Staff Into Helping Them Take Down Cryptocurrency Services 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/attackers-dupe-godaddy-staff-into-helping-them-take-down-cryptocurrency-services\/","og_locale":"en_US","og_type":"article","og_title":"Attackers Dupe GoDaddy Staff Into Helping Them Take Down Cryptocurrency Services 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/attackers-dupe-godaddy-staff-into-helping-them-take-down-cryptocurrency-services\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2020-11-23T14:09:04+00:00","og_image":[{"width":1,"height":1,"url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/11\/attackers-dupe-godaddy-staff-into-helping-them-take-down-cryptocurrency-services.gif","type":"image\/gif"}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/attackers-dupe-godaddy-staff-into-helping-them-take-down-cryptocurrency-services\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/attackers-dupe-godaddy-staff-into-helping-them-take-down-cryptocurrency-services\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Attackers Dupe GoDaddy Staff Into Helping Them Take Down Cryptocurrency Services","datePublished":"2020-11-23T14:09:04+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/attackers-dupe-godaddy-staff-into-helping-them-take-down-cryptocurrency-services\/"},"wordCount":612,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/attackers-dupe-godaddy-staff-into-helping-them-take-down-cryptocurrency-services\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/11\/attackers-dupe-godaddy-staff-into-helping-them-take-down-cryptocurrency-services.gif","keywords":["headline,hacker,dns,social,cryptography"],"articleSection":["CyberSecurity Blogs"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/attackers-dupe-godaddy-staff-into-helping-them-take-down-cryptocurrency-services\/","url":"https:\/\/www.threatshub.org\/blog\/attackers-dupe-godaddy-staff-into-helping-them-take-down-cryptocurrency-services\/","name":"Attackers Dupe GoDaddy Staff Into Helping Them Take Down Cryptocurrency Services 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/attackers-dupe-godaddy-staff-into-helping-them-take-down-cryptocurrency-services\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/attackers-dupe-godaddy-staff-into-helping-them-take-down-cryptocurrency-services\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/11\/attackers-dupe-godaddy-staff-into-helping-them-take-down-cryptocurrency-services.gif","datePublished":"2020-11-23T14:09:04+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/attackers-dupe-godaddy-staff-into-helping-them-take-down-cryptocurrency-services\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/attackers-dupe-godaddy-staff-into-helping-them-take-down-cryptocurrency-services\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/attackers-dupe-godaddy-staff-into-helping-them-take-down-cryptocurrency-services\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/11\/attackers-dupe-godaddy-staff-into-helping-them-take-down-cryptocurrency-services.gif","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/11\/attackers-dupe-godaddy-staff-into-helping-them-take-down-cryptocurrency-services.gif","width":1,"height":1},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/attackers-dupe-godaddy-staff-into-helping-them-take-down-cryptocurrency-services\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"headline,hacker,dns,social,cryptography","item":"https:\/\/www.threatshub.org\/blog\/tag\/headlinehackerdnssocialcryptography\/"},{"@type":"ListItem","position":3,"name":"Attackers Dupe GoDaddy Staff Into Helping Them Take Down Cryptocurrency Services"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/38339","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=38339"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/38339\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/38340"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=38339"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=38339"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=38339"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}