Hackers Compromise Country Domains to Forge Google HTTPS Certificates

ISLAMABAD: Cyber attackers have successfully hijacked three country-code top-level domain registries, exploiting them to obtain unauthorized HTTPS certificates for Google and YouTube properties. The incident, disclosed by Google on October 6, raises significant concerns about the security of internet infrastructure.

According to Google, the compromised registries belong to Ghana (.gh), Sierra Leone (.sl), and American Samoa (.as). The attackers altered the authoritative DNS settings of these domains, allowing them to issue fraudulent certificates without breaching Google’s own systems. This incident highlights the vulnerabilities present in domain registration processes and the potential for misuse.

The implications of this breach extend beyond the immediate threat to Google and YouTube. Such vulnerabilities can undermine user trust in online platforms, potentially affecting millions of users globally. The incident also raises alarms about the security protocols in place for domain registries, which are crucial for maintaining the integrity of internet communications.

In response to this incident, Google has stated that it is working closely with the affected registries to mitigate the risks and prevent future occurrences. Cybersecurity experts are urging a review of existing security measures within domain registries to enhance protection against similar attacks in the future.