GoDaddy’s security has been under the microscope lately, with two high profile security incidents reported by Krebs On Security on November 21 and on March 31. I wrote about the first incident, which involved an account held by Escrow.com. With many employees working from home because of Covid-19, it has likely become a much more challenging task to ensure GoDaddy employees use best security practices to avoid being hacked or having systems or accounts compromised.

According to an article in The Copper Courier, GoDaddy tested its employees by deploying an email promising a holiday bonus, but it was really a phishing test in disguise:

GoDaddy recently posted a job listing on LinkedIn for an Aftermarket Sales Account Executive, presumably on its Afternic team in the company’s Cambridge office. If you know of someone that is looking for a sales job and would be good at inbound domain name sales, perhaps this is the right opportunity for them.

When I was reading through the job description, something unusual caught my attention. The company is encouraging people who have a “side hustle” to keep it up while they are employed by GoDaddy:

Logan Flatt noticed what appears to be a new GoDaddy / Afternic inquiry landing page, which he shared on Twitter today:

When I visit https://t.co/MRkK8uheE8, I see what appears to be a new or test lander from Afternic. Using
Nameserver 1:https://t.co/NkK3UqHVDs
Nameserver 2:https://t.co/i9kkvT4sey pic.twitter.com/SC9JeYoKA6

— Logan (@LoganFlatt) December 12, 2020

According to a report published earlier today on Krebs on Security, a popular and well-sourced cybersecurity blog, there was an “incursion at GoDaddy that relied on tricking employees into transferring ownership and/or control over targeted domains to fraudsters.” This social engineering targeted the Liquid.com domain name owned and used by a cryptocurrency company called Liquid. Other cryptocurrency platforms may have also been targeted, according to Krebs.

Prior to reading this report, I read a blog article published by Liquid CEO Mike Kayamori on the Liquid corporate blog discussing a “security incident” involving the company’s domain name. In the blog article, Kayamori reported the following involving GoDaddy: