Google says counterfeit TLS certificates of major services stolen by hackers
- Attackers hijacked three country-code domains to obtain fraudulent HTTPS certificates for major websites
- Fake certificates could enable convincing traffic interception and phishing against affected domains
- Google revoked the certificates, protected Chrome users, and warned impacted organizations
Cybercriminals recently managed to hijack three country-code top-level domains (ccTLDs) and used the access to generate HTTPS certificates covering several Google domains, as well as those belonging to other organizations. Google said the attack placed thousands of websites at risk, but stressed that the certificates have since been revoked.
According to Google, the domains that were hijacked are .gh (Ghana), .sl (Sierra Leone), and .as (American Samoa). During the attacks, the threat actors modified authoritative DNS records, obtaining HTTPS certificates covering not just Google, but other organizations, too.
In other words, any website operating on these domains was at risk, as well as all of the visitors. By manipulating authoritative DNS records,...
Copyright of this story solely belongs to www.techradar.com. To see the full text click HERE
