Hackers obtain counterfeit TLS certificates for Google and other large services

The report describes an incident in which attackers controlled three country-code top-level domains to perform DNS hijacking, modify authoritative DNS records and nameserver delegations, and obtain unauthorized TLS certificates for selected websites; Chrome blocked known fraudulent certificates but browser-side mitigation is not comprehensive and undiscovered certificates remain a threat. The incident did not involve compromise of affected domain owners’ infrastructure, and the report cites the 2011 DigiNotar breach as a similar historical example.