A GoDaddy.com customer service employee fell victim to a spear-phishing attack, KrebsOnSecurity has learned. Escrow.com helps people safely broker all sorts of transactions online. The attack gave the phisher the ability to view and modify key customer records. The attacker also obtained free encryption certificates from Lets Encrypt. GoDaddy acknowledged that on March 30 the company was alerted to a security incident involving a customer’s domain name. Five other customer accounts were potentially affected, but GoDaddy wouldnt say how many.”]
Source: https://krebsonsecurity.com/2020/03/phish-of-godaddy-employee-jeopardized-escrow-com-among-others/