Attackers Hijack Three ccTLDs to Obtain Google Certificates

Attackers compromised three ccTLD registries (.gh, .sl, .as), hijacked authoritative DNS records, and obtained unauthorized HTTPS certificates covering Google domains and additional organizations; Chrome blocked the certificates via CRLSets and Google worked with certificate authorities to revoke them. The report warns that DNS control can subvert HTTPS trust, urges monitoring of Certificate Transparency logs, and recommends restrictive CAA/ACME configurations and broader HTTPS ecosystem changes.