Attackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains

Summary

Attackers compromised three country-code top-level domains (ccTLDs) and obtained unauthorized HTTPS certificates for several Google domains, Google said on October 6. Google's own systems were not breached, but any domain ending in .gh (Ghana), .sl (Sierra Leone) or .as (American Samoa) was put at risk. With such a certificate, an attacker could pose as the real site over an encrypted

Lotu Radar provides attributed news summaries and links to the original publisher. Full reporting and copyright remain with the source.