Hackers obtain counterfeit certificates for Google and other major services

Attackers hijacked three top-level domains to generate unauthorized encryption certificates for Google and several other global brands, Ars Technica Business reported. The breach occurred after attackers launched a series of cyberattacks targeting specific domain registries. [1]

According to Ars Technica Business, the attackers compromised the country code top-level domains for .gh, .sl, and .as. They modified the authoritative domain name system records for selected domains within those namespaces. [1]

By taking control of the domain name system records, the hackers passed automated validation checks to obtain counterfeit certificates, Ars Technica Business reported. Google stated that the unauthorized certificates affected several Google domains alongside other widely used online services. [1]

Google LLC is an American multinational technology corporation focused on online advertising, search engine technology, and cloud computing. Its parent company is Alphabet Inc, which ranks among the largest technology firms globally. [3]