Threat actors obtained unauthorized HTTPS certificates for multiple Google domains following compromises at third-party operators managing country-code top-level domains including Ghana, American Samoa, and Sierra Leone. The attackers modified authoritative DNS records to intercept traffic.
READ THE ORIGINAL ARTICLE AT BLEEPINGCOMPUTER.COM →