Hackers hijack three country-code domain registries, obtain HTTPS certificates for Google domains

What happened
Attackers who took control of three country-code top-level domains (ccTLDs) used that access to obtain HTTPS certificates for several Google domains and for domains run by other large organizations, Google disclosed on Tuesday. “These incidents did not involve a compromise of Google’s systems,” … More → The post Hackers hijack three country-code domain registries, obtain HTTPS certificates for Google domains appeared first on Help Net Security . Attackers compromised the third-party operators of the .gh (Ghana), .sl (Sierra Leone) and .as (American Samoa) ccTLDs, putting every domain under those endings at risk, and then changed the authoritative DNS (the system that turns a domain name into an address) records. Google is an Internet and software company based in Mountain View, founded in 1998.
Sources & evidence
- Help Net Security Reporting source
Hackers hijack three country-code domain registries, obtain HTTPS certificates for Google domains ↗
https://www.helpnetsecurity.com/2026/10/07/google-unauthorized-https-certificates-cctld-hijacks/