Experts at Cisco discovered a new technique dubbed Domain Shadowing consisting in the creation of thousand subdomains used to spread the Angler exploit kit. Cyber criminals have used hundreds of legitimate domain name accounts registered through GoDaddy to run a malicious campaign using the popular Angler exploitation kit. The cyber kill chain is simple as efficient, when Internet users view a malicious advertisement is. redirected to one of the hacked subdomain hosted by GoDaddy, which delivers the. Angler. exploit kit or redirects to victims to other malicious websites managed by the criminal crew.”]
Source: http://securityaffairs.co/wordpress/34428/cyber-crime/godaddy-accounts-compromised-angler.html