Attackers breach three domain registries to get Google HTTPS certificates

The breaches affected the .gh, .sl and .as registries, covering Ghana, Sierra Leone and American Samoa. Attackers modified authoritative DNS records, according to BleepingComputer, and obtained unauthorized certificates for several Google domains. Chrome automatically blocked the identified certificates, while Google worked with certificate authorities to revoke those covering its properties, according to Cyber Security News.

• Google's own systems were not breached, according to The Hacker News.

Covered by 3 publishers within 5 hours of the first report.

• The Hacker News: Attackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains

Reporting3

CSN Cyber Security News Hackers Hijack .gh, .sl and .as Registry to Obtain Unauthorized HTTPS Certificates · Guru Baran 11:39 AM

THN The Hacker News Attackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains · info@thehackernews.com (The Hacker News) 2:48 PM

BC BleepingComputer Hackers hijack Google domains after breaching ccTLD registries · Bill Toulas 4:50 PM

Related

BC Nikkei says attackers breached employee email accounts October 5

BL OpenAI's Jason Kwon apologizes over AI breach of Australian government site October 5

G OpenAI and other AI firms face questions at Australian inquiry October 5

SW Google fixes 247 security vulnerabilities in Chrome 155 October 6

Topics GoogleData breaches