Attackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains
FROM THE PUBLISHER
Attackers compromised three country-code top-level domains (ccTLDs) and obtained unauthorized HTTPS certificates for several Google domains, Google said on October 6. Google's own systems were not breached, but any domain ending in .gh (Ghana), .sl (Sierra Leone) or .as (American Samoa) was put at risk. With such a certificate, an attacker could pose as the real site over an encrypted
Original reporting by The Hacker News. Some articles may require a subscription.