Hackers seized domain zones of three countries and issued fake

Attackers gained control over the domain zones of Ghana, Sierra Leone, and American Samoa. Hackers modified DNS records and created fake HTTPS certificates.

The attack affected Google domains and other major organizations. Attackers could intercept traffic and distribute malware without browser warnings.

Google responded promptly to the incident. The company blocked the fraudulent certificates in Chrome and ensured their revocation through certificate authorities.

• Blocking fake certificates in the Chrome browser
• Revoking invalid keys at certification centers
• Notifying affected brands via Certificate Transparency data

Certificate authorities did not violate procedures as the requests appeared legitimate. Google admits it may not have detected all compromised domains.

Protection only works for Chrome users. Details on the exact number of affected sites and the hackers' identities remain undisclosed.