123 Reg says AI-driven attack exposed customer contact and account data
The GoDaddy-owned registrar says the September 18 intrusion was limited to reading and suspects China-linked use of ARTEX.
70
Vendor
GoDaddy
- Mentions · 7d1
- Mentions · 30d5
- All mentions8
- First seenSep 1, 2026
- Last mentioned4d ago
Timeline
8 articles · newest firstGoDaddy revokes 404,607 SSL certificates after profile mismatch
Revocation took effect October 21, 2026, and sites still serving those certificates can fail browser TLS checks.
58
GoDaddy revokes 404,607 TLS certificates after policy mismatch
Revocation finished on October 21 after a missed deadline; reports describe no confirmed private-key theft.
64
Hackers Abuse 20,000 Cloudflare Pages Domains to Push Fake Microsoft Security Alerts
Attackers used over 20,000 Cloudflare Pages domains to push fake Microsoft alerts into tech-support scams.
74
Researchers Uncover 20,000 Malicious Cloudflare Pages Domains Used in Tech Support Scams
Infoblox found over 20,000 Cloudflare Pages domains used by Help TDS for Microsoft tech-support scams.
62
New Phishing Campaign Abuses Windows Mshta.exe to Steal Credentials and Secrets
Fortra researchers track an active phishing campaign targeting Spanish speakers that abuses mshta.exe to run HTA payloads for reconnaissance and credential theft.
50
Hackers Spend Nearly $7 Million on Expired Domains to Redirect Traffic to Scams and Malware
Infoblox reports Sable Squirrel spent nearly $7 million on expired domains to redirect traffic to illegal sports streaming, gambling, and malware infrastructure.
55
NovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 Sessions
NovaCookies AitM phishing kit, a Sneaky 2FA variant, uses genuine Docusign lures to steal Microsoft 365 sessions at hundreds of organizations.
45
Appears with
- Microsoftvendor · 4
- Cloudflarevendor · 3
- UltraViewerproduct · 2
- WordPressproduct · 2
- Hotejkathreat actor · 2
- ROI777threat actor · 2
- GoDaddyorganization · 2
- Infobloxorganization · 2
- Cloudflare Pagesproduct · 2
- Google Playorganization · 1
- Anthropicorganization · 1
- NovaCookiesmalware · 1
- Help TDSthreat actor · 1
- ARTEXmalware · 1
- NanoCoreproduct · 1
- Docusignvendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.