Attackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains
Noticiada por 2 meios
Também noticiada por Infosecurity Magazine
Attackers compromised three country-code top-level domains (ccTLDs) and obtained unauthorized HTTPS certificates for several Google domains, Google said on October 6 .
Google's own systems were not breached, but any domain ending in .gh (Ghana), .sl (Sierra Leone) or .as (American Samoa) was put at risk. With such a certificate, an attacker could pose as the real site over an encrypted connection and read the private data sent to it.
