Hackers hijack Google domains after breaching ccTLD registries
Attackers obtained unauthorized HTTPS certificates for several Google domains and hijacked ccTLD registries for Ghana, American Samoa, and Sierra Leone.
According to BleepingComputer, hackers managed to obtain unauthorized HTTPS certificates for multiple Google domains and hijacked country-code top-level domains (ccTLDs) for Ghana, American Samoa, and Sierra Leone.
The cyberattack involved breaching third-party operators and modifying authoritative DNS records, allowing malicious actors to alter routing and compromise the security posture of the affected domains.
This security breach highlights the severe risks associated with third-party dependencies in DNS management and domain name system registries, demonstrating how local registrar compromises can impact global tech giants.
For the tech and cybersecurity community in Uzbekistan and the broader CIS region, this incident serves as a critical reminder to audit domain registrar securities and strictly monitor DNS configurations against potential hijackings.
