Tech

Hackers obtain counterfeit TLS certificates for Google and other large services

Read full article at source ↗

Based on a feed excerpt; full article content has not been acquired. Source evidence retrieved 06/10/2026, 22:28:24 UTC.

Briefings

Hackers compromised three country code top-level domains (ccTLDs) by hijacking them and modifying DNS records to bypass automated validation checks. This allowed them to mint counterfeit TLS certificates for Google and other major organizations, enabling cryptographic impersonation of the affected infrastructure. Google responded by updating Chrome to block unauthorized certificates and working with certification authorities to revoke the compromised ones.

Key points

• Attackers hijacked three country code top-level domains (ccTLDs) and modified authoritative DNS records to bypass automated domain control validation checks.
• The compromised domains included .gh, .sl, and .as, allowing attackers to obtain unauthorized x.509 certificates for Google and other large organizations.

Context and limitations

Evidence covers only the successful hijacking of three specific ccTLDs and the subsequent certificate issuance; it does not detail the full scope of affected domains, the timeline of the attack, or the specific number of certificates issued.

Generated by Bittrees-hosted qwen35-2b sha256:aaf42c8b7c3c on 06/10/2026, 23:05:26 UTC. Based on publisher-provided feed evidence; may not cover the full original article. Check the source for details.

View archived briefing on IPFS
bafybeiaf2xjs3wgehcmwsnm35r4nwfb4leafg3xxya4iynzl5oodhw2zv4