GoDaddy has stated an unknown Threat Actor has maintained persistent access to their network since at least 2019. The Threat Actor unveiled themselves 4 times, without losing access, in 2019, 2020, 2021, and 2022.
Follow
@th3j35t3r Hijacking expired domains would make this a goldmine, let alone anything else like email forwarding.