Attackers Hijack Three ccTLDs to Obtain Google Certificates
Attackers compromised .gh, .sl and .as registries to obtain unauthorized HTTPS certificates
Source unique
Aucun autre média suivi par Zonactu ne rapporte encore cette info.
Attackers have compromised three country-code top-level domain (ccTLD) registries and obtained unauthorized HTTPS certificates covering several Google domains and sites belonging to other organizations.
The incidents affected the .gh (Ghana), .sl (Sierra Leone) and .as (American Samoa) namespaces, according to a post published by Google's Chrome Secure Web and Networking Team on October 6. The attackers modified authoritative Domain Name System (DNS) records during the hijacks, putting domains under the three ccTLDs at risk.
