Security News > 2023 > February > GoDaddy admits: Crooks hit us with malware, poisoned customer websites

GoDaddy admits: Crooks hit us with malware, poisoned customer websites
2023-02-20 19:36

The malware intermittently redirected random customer websites to malicious sites.

Redirects are so common that if you hang around web developers at all, you'll hear them referring to them by their numeric HTTP codes, in much the same way that the rest of us talk about "Getting a 404" when we try to visit a page that no longer exists, simply because 404 is HTTP's Not Found error code.

There are actually several different redirect codes, but the one you'll probably hear most frequently referred to by number is a 301 redirect, also known as Moved Permanently.

Others include 303 and 307 redirects, commonly known as See Other and Temporary Redirect, used when you expect that the old URL will ultimately come back into active service.

In early December 2022, we started receiving a small number of customer complaints about their websites being intermittently redirected.

Upon receiving these complaints, we investigated and found that the intermittent redirects were happening on seemingly random websites hosted on our cPanel shared hosting servers and were not easily reproducible by GoDaddy, even on the same website.


News URL

https://nakedsecurity.sophos.com/2023/02/20/godaddy-admits-crooks-hit-us-with-malware-poisoned-customer-websites/