Mark Anderson / Domain Thief

[Bill]

Acidmax, can you think over your activities for the past few weeks and look for ways in which you might have been phished or keylogged?

Have you responded to any emails that from godaddy, for instance?

It would be interesting to see how godaddys login responds to brute force attacks. Do they force a 24 hour wait after 3 false entries, or do they just passively accept hundreds or thousands of login attempts? Anybody know?

I have heard it speculated that godaddys internal security has allowed hackers to steal id/passes in bulk. No evidence, just speculation, based on the frequency of thefts from godaddy.

Keylogging spyware also seems like a likely possibility.