Google Domains Impacted by Recent ccTLD Hijacks
Summary
Hackers have successfully hijacked the .gh, .sl, and .as country-code top-level domains (ccTLDs). This hijacking allowed attackers to obtain HTTPS certificates for several Google domains, potentially impacting Google Domains services.
IFF Assessment
FOE
The hijacking of ccTLDs and the subsequent acquisition of HTTPS certificates for major domains represents a significant security compromise that defenders must contend with.
Defender Context
This incident highlights a critical vulnerability in how ccTLDs are managed and secured. Defenders should be aware of the potential for similar attacks targeting other domain extensions and the implications for trust and authentication when certificates are compromised.