Hackers Obtain Counterfeit TLS Certificates After Registry Breach

· Tech

Hackers obtained counterfeit TLS certificates for Google and other large services after compromising three domain registries, according to a report. The unauthorized certificates could allow attackers to impersonate legitimate websites and intercept encrypted traffic. TLS certificates are the mechanism that proves a website's identity and secures connections between users and services, so a registry-level compromise is a serious supply-chain problem. The incident affects trust in the certificate issuance process, which underpins secure browsing, and raises questions about how quickly the certificates can be revoked and how the registries were breached.

Why it matters：A registry-level compromise lets attackers forge identity for major services, undermining the certificate trust chain that the entire web depends on and prompting scrutiny of certificate authorities and domain registries.

Key points

  • Three domain registries were compromised.
  • Counterfeit TLS certificates were obtained for Google and other large services.
  • The unauthorized certificates could be used to impersonate legitimate sites.

Sources (original reporting)

More stories from this day