Hey ya'll. This is really Chris Coyier. I had css-tricks. It recently came to my attention that the ownership of this domain has been transferred away from my ownership to PlanetDomain. For now, thankfully the nameservers still point to MediaTemple , so the site is still up. That could change at any time. Hacker gains access to my GoDaddy account and GMail account. He initiates the domain transfer away from GoDaddy: unlocking domain, changing registration information, putting in request from PlanetDomain.
Emails are likely generated from all this activity but I saw none of them. Presumably the hacker deleted them from my GMail account. Strange: My GoDaddy account password was never changed, nor does that password exist in my GMail account. How did he get in? I wake up and can't log into GMail.
I reset the password through cell phone verification I still have this text message and a screenshot of it. I honestly didn't think much of it at the time. I thought of a few reasonable explanations for it and went on with my day. Question: Was the hacker able to gain access to my GMail account by resetting the password, or did he gain access some other way and then reset the password to attempt to lock me out.
In the evening of this day the domain transfer was completed away from GoDaddy and to PlanetDomain. Again the hacker was able to access my GMail, gaining access to the needed emails and getting the transfer verification codes, and then delete them so I never saw them. He changed the password to the GMail account again. This same evening, I had a minor site hack. VaultPress caught it. In my index.
Later I found this same exact thing happened to Kirupa Chinnathambi of kirupa. Uh oh: does this mean the hacker has access to my MediaTemple hosting too?
